YOGI  BERRA,  PROJECT  MANAGER 

IT  project  leaders  can  learn  a  lot  from  former 
baseball  manager  Yogi  Berra,  page  44 


FIXES  ALL  AROUND 

Oracle  releases  101  patches  as  part  of 
its  quarterly  software  update,  page 
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IN  DEPTH:  E-V0TIN6 


E-voting  Tchnology 
Faces  Critical  Test 

Challenges  to  results  likely  if  systems  fail  during  election 


BY  MARC  L.  SONOINI 

The  widespread  use  of  con¬ 
troversial  electronic  voting 
machines  could  lead  to  chaos 
after  next  month’s  midterm 
elections  if,  as  some  critics 
suggest,  losing  candidates 
and  their  supporters  move  to 
challenge  the  results. 

Working  under  a  vaguely 
worded  federal  mandate, 
election  officials  nationwide 
have  replaced  lever-activated 
machines,  punch-card  sys¬ 


tems  and  other  outmoded 
voting  methods  with  elec¬ 
tronic  equipment. 

Much  of  the  criticism 
to  date  has  been  aimed  at 
touch-screen  systems,  or 
direct  recording  electronic 
devices,  which  critics  say 
aren’t  rigorously  tested  and 
certified  and  are  unreliable 
and  prone  to  crashing.  Crit¬ 
ics  also  contend  that  DREs 
are  inherently  vulnerable  to 
hacking  and  viruses. 


“The  potential  definitely  is 
there  for  fraud,”  said  Bruce 
Funk,  former  elections  direc¬ 
tor  for  Emery  County,  Utah. 

E-voting,  page  12 


INSIDE 

The  rush  to  e-voting  was 
spurred  by  the  passage  of  the 
HAVA  bill  in  2002.  PAGE  12 

E-voting  success  depends  on 
voter  attitudes  and  best  prac¬ 
tices,  says  Robert  L.  Mitchell. 

PAGE  38 


Feds  Start  Small  on  Smart  IDs 

Agencies  race  to  meet  rollout  deadline 


BY  JAIKUMAR  VIJAYAN 

Several  federal  agencies  said 
last  week  that  they’re  ready 
to  start  distributing  smart  ID 
cards  to  workers  by  Friday,  as 
mandated  by  a  directive  issued 
in  2004  by  President  Bush.  But 
some  of  the  initial  rollouts  will 
be  very  small  and  will  focus 
solely  on  controlling  access  to 


buildings  —  not  IT  systems. 

For  instance,  the  Social  Se¬ 
curity  Administration  became 
at  least  technically  compliant 
with  the  directive  last  week 
when  it  issued  one  of  the  new 
ID  cards  to  Commissioner  Jo 
Anne  Barnhart.  SSA  spokes¬ 
woman  Kia  Green  said  the 
agency  expects  to  hand  out 


more  cards  in  the  coming 
weeks  but  is  “still  in  the  proc¬ 
ess  of  finalizing  the  details.” 
She  added  that  the  SSA  hopes 
to  issue  cards  to  all  of  its  em¬ 
ployees  and  contractors  by  the 
end  of  September  2008,  which 
is  the  deadline  for  doing  so. 

Another  agency  that  said  it 
will  meet  this  week’s  deadline 
in  a  small  way  is  the  Environ¬ 
mental  Protection  Agency. 

The  EPA  plans  to  issue  the 
so-called  personal  identity 
verification,  or  PIV,  cards  to  “a 
small  handful”  of  employees, 
said  spokesman  Dale  Kemery. 
But  he  added  that  because 
of  budgetary  and  technical 
considerations,  making  the  ID 
cards  available  throughout  the 
18,000-worker  agency  will  be 
“a  fairly  long  rollout.”  He  de- 

Smart  IDs,  page  55 
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When 
assembling 
the  top  tier  of  their  IT 
organizations,  today’s 
CIOs  aren’t  looking  for 
technologists;  they’re 
looking  for  business  leaders. 
Page  41 
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Featured  server  is  the  IBM  BladeCenter 
Machines  Corporation  in  the  United  _ 
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.INFRASTRUCTURE  LOG 

_DAY  25:  They’re  in  the  cafeteria!!  AAAGGGHHHM  These 
useless  things  can’t  work  with  each  other.  They  aren’t 
scalable.  They  aren’t  responsive.  And  you  can’t  adjust 
new  capacity  on  the  fly.  The  horror. 

_So  many  of  them,  I  have  to  eat  standing  up.  My  arches 
are  killing  me.  And  I  got  avocado  on  my  shirt. 

_DAY  26:  The  answer:  IBM  BladeCenter®  with  Dual-Core 
Intel®  Xeon®  Processors  to  boost  performance  and  balance 
workloads.  Its  self-automating  features  make  it  easy 
to  manage,  and  it  has  more  blades  per  chassis  for  a 
smaller  footprint.  The  BladeCenter  even  opened  up  its 
specs,  so  the  things  we  buy  today  can  work  with  the 
things  we  buy  tomorrow. 

_I  can  eat  my  turkey-avocado  sandwiches  in  peace  again. 
Mmmmm. . . 
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The  Virtual  Procrastinators 

In  the  Technology  section:  Matt  Dattilo,  CIO  at 
PcrkinElmer,  says  server  virtualizatiblflf  going 
smoothly  for  his  shop.  But  about  half  the  natior 
data  centers  are  still  holding  back.  Find  out  why 


10.23.06 


Managers  Forum 


In  the  Management  section:  Why  do  project  man 
agers  resist  the  latest  and  greatest  tools?  And 
what’s  the  point  of  a  project  plan  anyway?  Paul 
Glen  comments,  and  readers  talk  back.  Page  48 


NEWS 

6  IBM  announces  Information 
Server,  a  bundle  of  nine  Web¬ 
Sphere  data  management  and  in¬ 
tegration  tools  that  includes  uni¬ 
fied  user  interfaces  and  a  common 
metadata  model. 


4P  Oracle  issues  101  patches  as 

PI  part  of  its  latest  quarterly  soft¬ 
ware  security  update,  with  45  of 
the  fixes  addressing  flaws  that  can 
be  remotely  exploited  without  any 
authentication. 


4C  EMC  unveils  two  upgraded 
■Uciariion  arrays  that  support 
both  the  iSCSI  and  Fibre  Chan¬ 
nel  protocols,  plus  an  entry-level 
Symmetrix  array  and  five  Celerra 
NAS  systems. 


Global  Dispatches:  Microsoft 
Itlnow  says  Windows  Vista  will 
ship  on  time  in  Europe. 


MThe  California  ISO,  which  man¬ 
ages  the  state’s  power  grid,  is 
replacing  Excel  spreadsheets  and 
business  intelligence  tools  from 
several  vendors  with  a  line  of 
products  from  Actuate. 
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j  Q&A:  Mark 
Canepa, the 

new  president  and 
CEO  of  Extreme 
Networks,  talks 
about  his  plans 
for  the  troubled 
company  —  which  faces  declining 
revenue,  Nasdaq  delisting  and  a 
stock-options  investigation. 


Cisco  enters  the  video- 
conferencing  market  with  two 
systems  designed  for  conference 
rooms.  Meanwhile,  established 
vendor  Polycom  announces  a  line 
of  three  high-definition  systems. 
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[Q&A:  Bl 
I  at  Age  17. 

Howard  Dresner, 
who  coined  the 
term  “business 
intelligence”  in 
1989,  evaluates 
the  past  17  years 
of  BI  and  pre¬ 
dicts  that  business  process  man¬ 
agement  will  be  the  next  big  thing. 


M  Security  Manager’s  Journal: 

Enterprise  DRM  Back  to  the 
Fore.  Mathias  Thurman  had  lost 
funding  for  his  effort  to  protect 
intellectual  property,  but  the  CIO 
puts  it  back  on  the  table. 


MANAGEMENT 


technologists; 
they  look  for  people  with  leader¬ 
ship  skills  and  business  acumen. 


«The  Team 
at  the  Top. 

When  today’s 
CIOs  assemble 
their  top  IT 
teams,  they 
don’t  look  for 


8  On  the  Mark:  Mark  Hall  suggests 
that  new  video  e-learning  tools 
might  make  IT  a  star  to  end  users. 


IJiJ  Don  Tennant  contends  that 
fc/CiMark  Hurd’s  appointment  of 
former  NCR  colleague  Jon  Hoak 
as  chief  ethics  officer  smacks  of 
cronyism  and  self-preservation. 


A  A  Thornton  A.  May  exhorts  his 
££  readers  to  be  the  thought 
leaders  who  will  clarify  IT’s  role 
for  the  business. 


AO  John  Halamka  proposes  Pele’s 
AwLaw  to  explain  how  power 
consumption  and  heat  issues  limit 
a  data  center’s  server  capacity. 

OQ  Robert  L.  Mitchell  says  solving 
UU  e-voting’s  technical  problems 
will  be  the  easy  part.  Implement¬ 
ing  it  properly  will  be  harder. 


Yogi  Berra,  PMP.  IT  mentor 
and  project  manager  Ralph 
Sacco  has  discovered  that  the 
ever-quotable  baseball  legend  has 
a  lot  to  say  about  his  line  of  IT 
work. 

Career  Watch.  Jerry  Luftman 
of  the  Society  for  Informa¬ 
tion  Management  discusses  em¬ 
ployers’  concerns  about  attract¬ 
ing,  developing  and  retaining  IT 
professionals.  Plus,  we  look  at  the 
latest  employment  numbers;  the 
skills  CIOs  are  seeking;  and  your 
employer’s  health  care  costs. 


Eft  Bari  Perkins  advises  treat- 
ull  ing  your  customers  as  if  they 
could  take  their  IT  business  else¬ 
where.  More  and  more,  they  can. 

Frankly  Speaking:  Frank  Hayes 

says  the  password  is  kR@Zee. 
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Should  You  Be 
Watching? 

SECURITY:  Jay  Cline  knows 
what  the  law  allows  when 
it  comes  to  monitoring 
employees,  but  he  wonders 
whether  it’s  wise  to  do  all 
that  the  law  permits. 

O  www.computerworld.com/security 

Four  Tips  When  Going  Mobile 

NETWORKING:  An  expert  provides  suggestions 
on  how  to  succeed  when  your  organization 
decides  to  scale  up  its  mobile  access. 

©  www.computerworld.com/networking 

Better  Planning 

SECURITY:  When  the  lines  between  policies, 
controls  and  specifications  get  muddy,  your 
IT  security  plan  suffers.  Columnist  Jon  Es- 
penschied  explains  the  difference  between 
the  why  and  the  how  of  a  solid  security  plan. 
©  www.computerworld.com/security 

Peripheral  Protection 

MOBILE/WIRELESS:  Flu  season  is  around  the 
corner,  and  new  products  can  help  protect 
you  from  nasty  germs  left  on  office  phones, 
keyboards  and  mice.  The  bad  news  is  that 
you’re  probably  not  using  any  of  them. 

0  www.computerworld.com/mobilewireless 

Computerworld  TechCast 

PODCAST:  This  weekly  audio  report  features 
short  explanations  of  important  enterprise 
technologies.  Recent  episodes  include  Ruby 
on  Rails,  ITIL  and  a  six-part  series  on  criti¬ 
cal  storage  technologies.  Listen  through 
your  browser,  or  download  the  podcast  to 
your  portable  MP3  player. 
0www.computerworld.com/blogs/techcast 

ONLINE  DEPARTMENTS 

Breaking  News  computerworld.com/news 

Newsletter  Subscriptions  computerworld.com/newsletters 
Knowledge  Centers  computerworld.com/topics 

The  Online  Store  computerworld.com/store 


THE 
POWER 
TO  KNOW 

SAS  SOFTWARE 


STATISTICS 

DATA  AND  TEXT  MINING 

FORECASTING  AND  ECONOMETRICS 

QUALITY  IMPROVEMENT 

OPTIMIZATION 


SAS  sets  the  standard  for  predictive  analytics  across  every  major  industry,  helping  you: 

■  Predict  customer  behavior,  reduce  churn  and  maximize  return  on  marketing  dollars. 

■  Automate  sales  leads  to  quickly  identify  cross-sell/up-sell  opportunities. 

•  Forecast  consumer  demand,  and  price  effectively  to  move  inventory  off  the  shelves. 

■  Balance  resource  allocations  to  paint  an  accurate  picture  of  performance. 

■  Reduce  warranty  costs  by  catching  defects  before  your  customers  do. 


f  www.sas.com/analytics  ■  Customer  success  stories  ■  1  866  8871340 


SAS  is  at  work  in  97  of  the  top  100  companies  on  the  2006  FORTUNE  500  -  with  customer  retention  rates 
exceeding  98%  annually  for  30  years. 


SAS  and  all  other  SAS  Institute  Inc.  product  or  service  names  are  registered  trademarks  or  trademarks  of  SAS  Institute  Inc.  in  the  USA  and  other  countries.  ®  indicates  USA  registration.  Other  brand  and  product  names  are  trademarks  of  their  respective  companies.  ©  2006  SAS  Institute  Inc.  All  rights  r  v  -xk  4Q9908US.  1006 
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IBM  Meshes  Integration, 
Data  Management  Tools 

Bundles  WebSphere  products  together, 
unifies  user  interfaces  and  metadata 


EMC  to  Fire  1,250 
As  Q3  Profits  Drop 

EMC  Corp.  plans  to  cut  up  to 
1,250  jobs  as  part  of  an  effort 
to  consolidate  operations  after 
acquiring  21  companies  over  the 
past  three  years.  EMC  employs 
31,000  people.  The  announce¬ 
ment  came  as  EMC  reported  third- 
quarter  earnings  of  $283.7  million, 
down  from  the  year-earlier  total 
of  $421.7  million.  Third-quarter 
revenue  increased  to  $2.8  billion 
from  $2.4  billion.  EMC  said  most 
of  the  job  cuts  will  be  redundant 
middle  management  posts. 


Software  Sales  Boost 
SAP  Sales,  Profit 

SAP  AG  cited  continued  growth  in 
sales  of  its  business  applications 
for  strong  third-quarter  revenue 
and  profit  gains. 


SAP  BY  THE  NUMBERS 

REVENUE 

Q3  ’06 

$2.83B 

S489M 

Q3  ’05 

S2.54B 

S421M 
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Microsoft  Reissues 
Windows  Patch 

Microsoft  Corp.  has  reissued  a 
Windows  security  patch  that  it 
published  on  Oct.  10  because  the 
software  did  not  work  properly 
on  Windows  2000  systems.  The 
company  acknowledged  that  the 
original  patch  did  not  correctly 
configure  a  Windows  Registry 
setting  called  a  “kill  bit,”  to  pre¬ 
vent  Windows  2000  from  running 
software  that  could  be  attacked. 
The  patch,  described  in  security 
bulletin  M806-061,  was  created 
to  fix  problems  in  the  Windows 
XML  parser. 


EDS  Increases  Stake 
In  Indian  Outsourcer 

Electronic  Data  Systems  Corp. 
has  agreed  to  purchase  an  ad- 
ditiona!  20%  stake  in  Bangalore, 
India-based  outsourcer  Mphasis 
BFL  Ltd.  for  about  $150  million. 
The  offer  requires  the  approval 
of  Mphasis  shareholders.  If  the 
sale  is  approved,  EDS  would  own 
about  77%  of  the  company.  EDS 
had  acquired  a  52%  stake  earlier 
this  year  and  merged  its  own  In¬ 
dian  subsidiary  with  Mphasis. 


BY  PATRICK  THIBODEAU 

ANAHEIM,  CALIF. 

ERALDED  BY  a 
seven-piece  band 
and  the  concert-like 
trappings  of  flames, 
smoke  and  strobe  lights,  IBM 
last  week  announced  a  soft¬ 
ware  offering  that  integrates 
nine  of  its  tools  for  managing 
various  types  of  data  and  mak¬ 
ing  the  information  available 
to  end  users. 

IBM’s  Information  Server, 
which  will  be  available  next 
month,  is  intended  to  be  a 
one-stop  shop  for  companies 
that  are  seeking  tools  to  help 
them  deal  with  data-intensive 
applications  such  as  business 
intelligence.  Priced  at  $125,000 
and  up,  depending  on  the 
number  of  product  modules 
purchased,  Information  Server 
combines  existing  data  cleans¬ 
ing,  integration  and  metadata 
management  tools  from  IBM’s 
WebSphere  product  line. 

Unified  Approach 

But  IBM  officials  said  the 
bundled  offering  is  based  on  a 
new  architecture  that  provides 
common  metadata,  unified 
user  interfaces  and  a  set  of 
shared  services  for  tasks  such 
as  security  and  reporting. 

Information  Server  supports 
service-oriented  architectures 
and  includes  connectors  to 
various  databases  and  sources 
of  unstructured  data,  as  well 
as  mainframe  and  packaged 
applications. 

Ambuj  Goyal,  IBM’s  general 
manager  of  information  man¬ 
agement,  said  at  the  company’s 
inaugural  Information  on  De¬ 
mand  Global  Conference  here 
that  until  now,  IT  staff’s  have 
had  to  configure  applications 
to  make  calls  to  other  data 
sources  to  obtain  information 
for  end  users.  But  Information 
Server  will  enable  users  to 
“get  information  from  multiple 


sources,  reconciled  and  bi¬ 
directional,”  Goyal  said. 

Frank  Brooks,  chief  data 
architect  at  BlueCross  Blue- 
Shield  of  Tennessee  Inc.,  al¬ 
ready  uses  many  of  IBM’s  data 
management  tools.  But  Brooks 
said  that  data  integration 
problems  “are  getting  far  too 
complex”  for  any  one  product 
to  handle. 

Managing  data  used  to 
mean  taking  information  from 
a  relational  database  and  run¬ 
ning  a  report,  Brooks  said. 

“Now,  it’s  not  just  internal 
data;  it’s  external,  and  it’s  also 
content”  —  meaning  e-mail 
and  other  material  that  isn’t 
stored  in  a  database,  he  added. 

Brooks  said  that  IBM  has 
been  good  about  working  with 
third-party  vendors  on  prod¬ 
uct  integration.  “I  think  they 


realize  that  they  can’t  provide 
every  possible  solution,”  he 
said.  For  instance,  the  insurer 
uses  a  tool  developed  by  Clear- 
Forest  Corp.  to  analyze  un¬ 
structured  data  in  conjunction 
with  IBM’s  tools. 

Information  Server  will 
work  with  various  third-party 
tools,  said  IBM  officials.  But 
unlike  the  WebSphere  soft¬ 
ware  that  has  been  incorpo¬ 
rated  into  Information  Server, 
the  third-party  tools  won’t  be 
able  to  use  the  full  capabilities 
of  the  bundled  offering. 

Hurkan  Balkir,  IT  direc¬ 
tor  of  marketing  solutions  at 
Experian  Group  Ltd.’s  offices 
in  Schaumburg,  Ill.,  said  the 
credit  reporting  firm  had  to 
develop  its  own  metadata  to 
connect  the  IBM  data  man¬ 
agement  tools  it  uses.  IBM  is 
heading  in  the  right  direction 
by  creating  a  common  meta¬ 
data  model  for  the  products  in 
Information  Server,  Balkir  said. 


Information  Server 


The  following  tools  are 
among  the  products  in  IBM’s 
data  management  bundle: 

INFORMATION  ANALYZER: 

Profiles  source  systems  and 
monitors  data  rules  to  eliminate 
the  risk  of  proliferating  “bad"  data. 

DATASTAGE:  Extracts,  transforms 
and  loads  data  from  multiple 

sources  and  target  systems. 

QUALITYSTAGE:  Standardizes 
and  matches  information  across 
mixed  sets  of  data  sources. 

METADATA  SERVER:  Supports 

unified  management,  analysis 
and  interchange  of  metadata 
through  a  shared  repository. 

Other  vendors  are  also 
building  integrated  suites  of 
data  management  tools,  said 
Rob  Karel,  an  analyst  at  For¬ 
rester  Research  Inc.  He  added 
that  adopting  a  bundled  tool 
set  doesn’t  preclude  a  best-of- 
breed  approach  by  users. 

But  they  don’t  get  the  same 
value  from  best-of-breed  tools, 
Karel  said,  because  the  inte¬ 
gration  within  products  like 
Information  Server  “is  embed¬ 
ded  vs.  plug-and-play.”  * 


AMBUJ  GOYAL,  general  manager 
of  information  management  at  IBM, 
spoke  with  Computerworld  last 
week  after  the  company  announced 
its  Information  Server  bundle  of 
tools.  Excerpts  from  the 
interview  follow: 

Usually,  when  vendors 
create  an  integrated 
product  suite,  some  us¬ 
ers  eye  it  warily  as  an 
effort  to  create  lock-in 
and  squeeze  out  best-of- 
breed  rivals.  How  do  you 
respond  to  those  kinds  of 
concerns  about  Information 
Server?  We  don’t  do  anything 
unless  customers  ask  for  it.  They 
asked  for  simplification.  They  were 
spending  time  integrating  my  prod¬ 
ucts  rather  than  solving  the  [issue 
of]  business  value,  i  believe  we 
are  best  of  breed  in  all  of  the  tech¬ 
nologies  today,  and  in  the  future,  if 
we  are  not,  we  don’t  force  custom¬ 
ers  not  to  deploy  best  of  breed. 


We  interact  and  work  with  open 
standards. 

If  customers  want  to  use  a  third- 
party  product  with  Information 
Server,  will  it  be  possible 
to  fully  integrate  them?  It 

should  be  -  if  [third-party 
vendors]  follow  standards. 
If  they  don’t  follow  Web 
services  standards,  if  they 
don’t  follow  metadata  stan¬ 
dards,  it  will  be  hard  to  in¬ 
tegrate.  In  fact,  that’s  been 
our  strategy  in  the  software 
group  since  1995,  when 
the  software  group  was  founded, 
that  we  will  win  by  better  execution, 
not  by  controlling  APIs. 

Is  Information  Server  tied  in 
with  your  services  organiza¬ 
tion,  so  that  users  are  going  to 
be  co-opted  into  buying  a  lot  of 
IBM  services?  No.  The  concept  of 
Information  Server  was  to  reduce 
the  drudge  work  associated  with  in¬ 


tegrating  and  deploying  our  technol¬ 
ogy  and  [to  let  users]  focus  more  on 
[work]  associated  with  transforming 
a  business. 

What  kind  of  influence  do  data 
management  and  products  such 
as  Information  Server  have  on 
internal  IT  management  models? 

Information  Server  will  force  some 
of  the  data  governance  that  people 
have  been  struggling  with.  By  defin¬ 
ing  just  simple  glossaries  -  by  just 
getting  an  agreement  on  that  before 
you  start  doing  an  information 
integration  project  -  it  helps  [users] 
do  data  governance.  And  the  more 
they  focus  on  data  governance,  the 
better  management  of  data  they 
will  have.  Companies  are  starling 
to  have  chief  data  officers,  or  chief 
information  officers  -  [someone 
focused  on]  the  information,  not 
the  traditional  CIO  -  whose  job  it  is 
to  get  control  of  the  data:  customer, 
price,  orders,  locations. 

-PATRICK  THIBODEAU 
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CERN  &  ProCurve  Networ 


CERN  uses  ProCurve  Switches  because 
we  generate  a  colossal  amount  of  data, 
making  dependability  a  top  priority.” 

— r David  Foster,  Communication  Systems.  Group  Leader,  CERN 


CERN  has  joined  with  ProCurve  to  build  their  network  based 
on  high-performance  security,  reliability  and  flexibility, 
along  with  a  lifetime  warranty*  From  the  world’s  largest 
applications,  to  a  company- wide  email,  just  think  what 
ProCurve  could  do  for  your  network. 


Get  a  closer  look  at  CERN  and  the 
world’s  biggest  physics  experiment. 

Visit  www. hp.com/go/procurveCERN3. 

For  more  information,  call  (800)  975-7684,  Ref.  Code  CERN3 


ProCurve  Net\ 


fores  long  as  you  own  the-  product,  with  nc-xt'buswss  day  advent fe  replacement 
(available  in  most'ooljrilrios}..  For  detail sy refer  to  the  PfoG'drvo  Software:  License,, 
Warr.ur1 »  Support  hooHerdt  liltp :/,■  www.iip  rujuv'irid/tuppoii/warranty/index  htrrr. 
The  ProCurve  Routing  Switch  93Q0u». series  ProCurve  Routing  Switch  9408sft  ProCurve 
Switch  8100fl  senes  and  the  ProCurve  Access  Control  Server  745wl  have  a  one-year 
warranty  with  n*ted  tins  .  i  aft  - 

©  2006  Hewlett  Pafillard  Deydlopmeftti  Company;,  1  ft  PliOid  Ci  CERjft,. 
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HP  Extends  Offer  for 
Mercury  Interactive 

Hewlett-Packard  Co.  has  extend¬ 
ed  its  tender  offer  for  all  of  Mer¬ 
cury  Interactive  Corp.’s  common 
stock  until  midnight  Eastern  time 
on  Friday.  The  previous  deadline 
was  Oct.  13.  HP  first  agreed  to 
acquire  Mercury  for  $4.5  billion 
in  July  in  an  effort  to  enhance  its 
IT  management  software  and  ser¬ 
vices  business.  Adding  Mercury 
would  boost  HP’s  annual  software 
revenue  to  more  than  $2  billion. 


Microsoft  Increases 
R&D  Spending  Plans 

Microsoft  Corp.  CEO  Steve 
Ballmer  said  the  company  plans 
to  spend  $7.5  billion  in  research 
and  development  in  fiscal  2007  - 
more  than  analysts  had  expected, 
and  $1.3  billion  more  than  Ballmer 
had  previously  projected.  Much 
of  the  investment  is  expected  to 
be  used  to  build  out  Microsoft’s 
online  services,  branded  Windows 
Live,  and  to  develop  content  for 
Microsoft’s  MSN  Web  site. 


Intel  Posts  Decline 
In  Q3  Sales,  Profit 

Following  layoffs  and  executive 
shuffles,  Intel  Corp.  reported  a 
third-quarter  profit  of  $1.3  billion, 
which  beat  the  estimates  of  finan¬ 
cial  analysts  but  was  35%  below 
last  year’s  results. 


McAfee  Buys  Israeli 
Software  Vendor 

McAfee  inc.  has  acquired  Onigma 
Ltd.,  a  Tel  Aviv-based  vendor  of 
data  leak  prevention  software, 
for  $20  million.  Onigma’s  Flow- 
Control  software  was  designed  to 
prevent  the  unauthorized  transfer 
of  data  over  a  network  by  e-mail 
or  malicious  software  and  the 
copying  of  data  to  devices  that 
attach  to  PCs,  such  as  USB  drives 
or  printers.  McAfee  said  it  plans 
to  ship  its  own  version  of  Flow- 
Control,  called  the  McAfee  Data 
loss  Prevention  Solution,  in  the 
first  quarter  of  2007. 
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Corporate  YouTubes 
May  Make  Stars . . . 


. . .  out  of  IT  departments.  Corporate  videos  with  high 
production  values  have  been  around  forever.  Making 
them  useful  and  available  to  business  units,  partners 
and  customers  is  a  relatively  recent  phenomenon,  says 
Ted  Cocheu,  CEO  of  Altus  Learning  Systems  Inc.  in 


Los  Gatos, 

Calif.  To 
make  them 
useful,  he  says 
videos  must 
be  searchable 
by  the  spoken 
word.  Accord¬ 
ing  to  Sebas¬ 
tian  Grady, 

Altus’  chief 
operating  officer,  the  compa¬ 
ny’s  Rapid  eLearning  service 
records  corporate  presenta¬ 
tions,  manually  indexes  the 
spoken  text,  synchronizes  it 
to  video  and  PowerPoint  im¬ 
ages,  and  stores  everything 
on  a  private,  secure  Web  site. 
The  site  can  be  accessed  only 
by  authenticated  users.  Grady 
says  Rapid  eLearning  also 
indexes  company  podcasts. 

By  Q2  of  next  year,  Cocheu 
says,  Altus  will  add  commu¬ 
nity  and  collaboration  tools, 
such  as  video-content-related 
discussion  forums.  Although 
hardly  a  path  to  Hollywood, 
CIOs  might  consider  direct¬ 
ing  a  few  programs  to  pre¬ 
pare  end  users  for  upcoming 
software  rollouts.  End  users 
would  be  able  to  search  the 


instructional  videos  only 
for  the  parts  that  interest  or 
involve  them,  saving  them 
time  and  making  you  a  star, 
at  least  in  their  eyes.  There’s 
a  one-time,  implementation- 
specific  charge  to  set  up  a 
Rapid  eLearning  Web  site. 
After  that,  it’s  $2  per  month 
per  user. 

Location-based 
services  mixing  up . . . 

. . .  data  types  to  create  new  appli¬ 
cations.  Some  mixes  are  easy, 
but  some  can  be  a  “beast,” 
says  Marc  Priolean,  vice  pres¬ 
ident  of  marketing  at  deCarta 
Inc.  in  San  Jose.  The  easy 
stuff,  such  as  blending  a  data¬ 
base  of  restaurants  and  hotels 
to  a  static  map,  is  nice,  but 
it’s  not  where 
the  action  is, 
he  says.  The 
company’s 
Drill  Down 
Server  (DDS) 
software  can 
be  used  to 
create  interac¬ 
tive  routing 
maps  that  im¬ 
prove  fleet  lo¬ 


gistics  by  giving  drivers  more 
precise  routes  that  take  into 
account  real-time  traffic,  time- 
based  turning  restrictions, 
right-turn/left-turn  driving 
patterns  and  other  events  that 
affect  delivery  performance 
and  driving  costs,  Priolean 
notes.  “Routing  algorithms 
are  a  very  complex  beast,”  he 
says.  This  week,  deCarta  will 
release  a  beta  version  of  its 
draggable  maps  feature  using 
JavaScript.  The  DDS  software 
is  custom-priced. 

AJAX  vendor  jacks 
up  enterprise . . . 

. . .  apps  like  magic.  Next  month, 
JackBe  Corp.  in  Chevy  Chase, 
Md.,  will  release  a  beta  ver¬ 
sion  of  its  Presto  software, 
which  can  help  IT  create  and 
manage  interactive,  Web- 
based  applications.  Chief 
Technology  Officer  John 
Crupi  calls  Presto  “upper- 
ware”  because  it  sits  above 
your  service-oriented  archi¬ 
tecture  middleware,  autho¬ 
rizing  AJAX-based  apps  to 
use  available  SOA  services. 
Presto  includes  an  AJAX 
Service  Bus,  so  apps  can  sub¬ 
scribe  to  SOA-based  events 
that  are  automatically  sent  to 
a  browser.  Likewise,  an  en¬ 
terprise  service  director  gov¬ 
erns  all  of  your  available  SOA 
services  so  IT  can  control 
access  to  those  services. 

Crupi  targets  Q1  of  2007 
for  the  final  release 
of  Presto.  Pricing 
will  be  $20,000  per 
CPU. 

Leverage  innate 
component , . . 

. . .  services  for  agent-free  SOA 
management.  Non-SOA  tools 
often  have  SOA  capabilities, 
so  why  not  use  them?  That’s 
the  logic  behind  the  release 
later  this  quarter  of  Amber- 
Point  5.  According  to  Ed 
Horst,  vice  president  of  mar¬ 
keting  at  AmberPoint  Inc.  in 
Oakland,  Calif.,  the  updated 
software  will  continue  to  use 
its  agents  on  systems  and 


software  to  enforce  runtime 
policies  for  SOA  services. 

In  the  update,  however,  the 
governance  engine  in  Amber- 
Point  is  no  longer  solely 
dependent  on  agents.  Some 
hardware  and  software  prod¬ 
ucts,  such  as 
the  enterprise 
service  bus 
from  Iona 
Technolo¬ 
gies  PLC  in 
Dublin  and 
switches  and 
routers  from 
F5  Networks 
Inc.  in  Seattle, 
include  ser¬ 
vices  that  AmberPoint  can 
now  manage  without  add¬ 
ing  agents.  Pricing  starts  at 
$35,000  per  CPU.  Agents,  if 
you  need  them,  are  free. 

Accelerate  your  real 
and  virtual . . . 

. . .  local  network  traffic  like  a 
god.  Zeus  Technology  Ltd.  in 
Cambridge,  England,  plans 
to  release  next  month  a  ver¬ 
sion  of  its  Zeus  Extensible 
Traffic  Manager  (ZXTM)  to 
work  as  a  virtual  appliance 
with  a  VMware  Inc.  server. 
And,  says  CEO  Paul  Di  Leo, 
Zeus  is  “in  discussions  with” 
XenSource  Inc.  in  Palo  Alto, 
Calif.,  to  offer  similar  services 
for  the  Xen  virtual  environ¬ 
ment.  It  already  works  with 
Solaris,  Linux  and  FreeBSD. 


Di  Leo  claims  that  ZXTM 
inspects  packets  on  your  lo¬ 
cal  network,  understands  the 
business  logic  they  entail  and 
routes  them  to  the  appropri¬ 
ate  server.  It  also  off-loads 
other  servers  from  Secure 
Sockets  Layer  and  XML  proc¬ 
essing  for  faster  application 
response.  ZXTM  comes  as 
either  software  or  an  appli¬ 
ance.  Pricing  starts  at  $5,700.  * 


Blend  data 
for  better 
location-based 
services,  says 

PRIOLEAN. 


Zeus  says  its  ZXTM  appliance 
boosts  network  traffic  performance. 
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Will  today  be  the  day 
you  lose  data  and  can't 
get  it  back? 

Wipe  out  worry  with 
backup  software  you 
can  trust. 

Save  20% 

MSRP  reduced 
$1 50-S300  on  select 
Retrospect  Editions 
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Introducing  EMC  Retrospect  Backup  Software 
for  Small  and  Medium  Businesses 


Everybody  knows  that  knot-in-your-stomach  feeling  when  critical  data  disappears.  That's  where  EMC 
Retrospect  7.5  for  Windows  comes  in.  Specifically  designed  for  small  and  medium  businesses, 

EMC  Retrospect  protects  all  of  your  vital  business  information. 

•  Reliably  protect  your  servers,  desktops,  and  notebooks  with  automated,  self-adjusting  operations 

•  Back  up  and  recover  fast  with  the  most  respected  disk-to-disk-to-tape  software  solution  in  the  industry 

•  Maximize  backup  security  with  government-certified  AES  encryption 

Limited-time  manufacturer's  discounts:  Save  $300  off  MSRP  on  Retrospect  Multi  Server 
Edition  (MZ11A0075C)  and  $150  off  MSRP  on  Retrospect  Small  Business  Server  Premium  Edition 
(TZ11A0075C).  Offer  available  through  EMC  Velocity2  SMB  partners. 


To  find  a  partner,  call  800-287-7541  or  send  an  e-mail  to  emcinsignia_sales@EMC.com  today. 


EMC? 

where  information  lives* 


EMC2,  EMC.  Retrospect,  and  where  information  lives  are  registered  trademarks  of  EMC  Corporation.  All  other  trademarks  are  the  properly  of  their  respective  owners.  ©  Copyright  2006 
EMC  Corporation.  All  rights  reserved.  Promotion  Is  available  on  Electronic  Software  Distribution  (ESD)  license  skus  only  (Retrospect  Multi  Server  w/  ASM  MZ11A0075C  and  Retrospect  Small 
Business  Server  Premium  w/  ASM  TZnAoo/oC). 
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Reliability  Is  Key  in  the 
World’s  Capital  Market 

By  MICHAEL  BETTENDORF 


LONDON,  Oct.  2006 — When  an  IT  system 
must  process  15  million  real-time  messages  per  day, 
with  peaks  at  2,000  messages  per  second,  even  one 
second  of  downtime  counts.  That’s  the  pressure  the 
London  Stock  Exchange  faced  when  building 
Infolect,  the  Exchange’s  real-time  stock-ticker 
information  delivery  system. 

The  solution  had  to  have  rock-solid  reliability, 
nothing  less.  “Reliability  is  one  of  the  key  attributes 
of  the  Exchange  in  its  technology  systems.  These 
systems  have  to  work  everyday,  24/7,  to  make  sure 
the  markets  are  there,”  said  CIO  David  Lester,  who 
evaluated  both  Linux  and  Microsoft®  Windows 
Server®  2003  for  the  Exchange’s  core  technology 
systems.  “We  looked  at  a  number  of  different  plat¬ 
forms  for  our  Technology  Roadmap,  and  we  lined 
up  our  business  requirements  with  the  capabilities 
of  those  platforms,  and  Windows  Server  was  the 
clear  choice.” 

In  Lester’s  view,  long-term  reliability  is  a  func¬ 
tion  of  a  solid  relationship:  “We  wanted  a  deep  part¬ 
nership  with  an  organization  that  could  deliver  the 
kind  of  mission-critical  technology  that  we  need¬ 
ed,  and  we  felt  Microsoft  delivered  just  that.” 

For  the  full  London  Stock  Exchange  case  study, 
plus  other  case  studies  and  independent  research 
findings  on  the  reliability  of  Windows  Server  versus 
Linux,  visit  microsoft.com/getthefacts 


RELIABILITY  NEWS  &  NOTES:  A  study  re¬ 
leased  yesterday  found  that  Windows  Server  was 


BREAKING  NEWS:  London  Stock 
Exchange  Achieves  Record  Reliability 

London  Stock  Exchange  CIO  David  Lester 
(above)  cites  Windows  Server  as  key  to  main¬ 
taining  system  reliability  and  performance. 


LESTER  SPEAKS  OUT: 

"We  looked  at  a  number  of  different  platforms 
for  our  Technology  Roadmap,  and  we  lined  up 
our  business  requirements  with  the  capabilities  of 
those  platforms,  and  Windows  Server  was  the 
clear  choice." 

- David  Lester,  CIO,  London  Stock  Exchange 


JOURNALISM  BEAT:  Continued  growth 
for  reliability-focused  newspapers  A  world¬ 
wide  survey  tracking  trends  in  newspaper  use 
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AT&T  to  Build 
Municipal  Network 

AT&T  Inc.,  which  has  pushed  for 
laws  that  would  block  certain 
kinds  of  municipal  wireless 
networks,  now  plans  to  build 
one  in  Riverside,  Calif.  The  city 
of  300,000  approved  AT&T’s 
plan  to  build  a  wireless  network 
throughout  developed  areas.  In 
addition  to  public  Wi-Fi,  AT&T 
will  deliver  wireless  service  to 
city  employees  and  public  safety 
agencies  on  a  licensed  frequency. 
The  network  is  expected  to  be 
operational  early  next  year. 


Software  Sales 
Boost  IBM  Results 

IBM  reported  strong  third-quarter 
financial  results,  spurred  by 
growth  in  its  software  business 
and  improved  mainframe  sales 
and  OEM  revenue. 


IBM  BY  THE  NUMBERS 

REVENUE 

PROFIT 

Q3  ’06 

S21.9B 

S2B 

Q3  ’05 

S22.3B 

S1.8B 

Level  3  Buys 
Services  Firm 

Level  3  Communications  Inc. 
has  agreed  to  acquire  Broad¬ 
wing  Corp.,  a  provider  of  voice, 
data  and  media  services,  for 
S1.4  billion  in  cash  and  stock. 
Level  3  said  the  acquisition  will 
boost  its  recent  efforts  to  target 
large  businesses.  Broadwing 
sells  fiber-network-based  ser¬ 
vices  to  the  wholesale  and  large- 
business  markets.  The  compa¬ 
nies  expect  the  deal  to  close  in 
the  first  quarter  of  2007. 


Shareholders  OK 
IBM  Purchase  of  ISS 

IBM  shareholders  have  approved 
’he  company’s  S1.3  billion  pur¬ 
chase  cf  Internet  Security  Sys¬ 
tems  inc.  ISS  offers  programs 
to  protect  networks,  serv¬ 
ers,  and  desktop  and  laptop 
PCs  by  preemptively  blocking 
Web  threats  such  as  spam  and 
viruses.  The  acquired  firm  will 
become  part  of  IBM’s  Global 
Technology  Services  division. 

said  it  will  retain  ISS’s 
1,300  employees. 


Continued  from  page  1 

E-voting 

Electronic  voting  technol¬ 
ogy  also  has  many  backers, 
including  top  election  officials 
in  several  states  who  contend 
that  the  systems  are  secure 
and  accurate. 

In  fact,  Georgia  Secretary  of 
State  Cathy  Cox  laid  no  blame 
on  e-voting  systems  for  her 
loss  in  the  state’s  primary  elec¬ 
tion  in  June.  A  spokesman  said 
that  Cox,  whose  office  over¬ 
sees  elections,  believes  that 
the  e-voting  tally  was  accurate. 

The  nationwide  dash 
to  e-voting  machines  was 
prompted  by  passage  of  the 
federal  Help  America  Vote  Act 
in  October  2002.  Work  on  the 
legislation  began  shortly  after 
the  controversial  2000  elec¬ 
tion  in  Florida,  which  required 
several  recounts  before  a  vic¬ 
tor  was  declared  in  the  U.S. 
presidential  race. 

HAVA  took  effect  on  Jan.  1, 
2006,  and  backers  and  crit¬ 
ics  agree  that  its  e-voting 
machine  provision  faces  its 
first  major  test  in  the  Nov.  7 
election,  which  is  expected  to 
include  many  close  races. 

Election  Data  Services  Inc., 
a  consulting  firm  in  Washing¬ 
ton,  estimates  that  some 
66  million  voters  —  about 
38%  of  registered  voters  na¬ 
tionwide  —  will  be  able  to 
use  e-voting  machines  to  cast 
ballots  on  Nov.  7.  In  the  2004 
election,  such  gear  was  avail¬ 
able  to  about  29%  of  voters, 
the  company  said. 

Early  Glitches 

In  smaller  tests  of  e-voting 
gear,  glitches  occurred  in 
several  primary  elections  na¬ 
tionwide  this  summer  and  fall, 
including  contests  in  Mary¬ 
land  and  Ohio.  Many  factors 
were  cited  for  those  problems, 
including  a  lack  of  training  for 
election  workers. 

Some  experts  fear  that  if 
such  problems  continue  next 
month,  some  results  will  be 
challenged  in  state  and  federal 
courts,  which  could  lead  to 
significantly  increased  voter 
skepticism  of  the  e-voting 
process. 

Some  results  have  already 


We  know  that  at  any 
time  you  convert  to 
a  new  system,  snafus  are 
bound  to  [happen]. 

SAM  REED,  SECRETARY  OF  STATE, 
WASHINGTON 


been  challenged:  A  group  of 
California  residents  unsuc¬ 
cessfully  sued  Mikel  Haas, 

San  Diego  County’s  registrar 
of  voters,  after  a  tight  special 
congressional  election  on  June 
6,  because  some  election  work¬ 
ers  stored  touch-screen  ma¬ 
chines  in  their  homes,  under 
seal,  prior  to  the  elections. 

“With  39%  of  voters  using 
DREs  on  Nov.  7,  this  election, 
more  than  any  in  the  past,  will 
give  losing  candidates  and  the 
public  grounds  for  completely 
doubting  the  outcome,”  said 
Aviel  Rubin,  an  electronic 
voting  expert  and  a  computer 
science  professor  at  Johns 


E-voting 
Push  Started 
With  HAVA 

THE  PUSH  for  states  to  quickly 
adopt  electronic  voting  systems 
can  be  traced  to  passage  of  the 
Help  America  Vote  Act  in  October 
2002. 

The  legislation  was  written  as 
part  of  an  effort  to  avoid  problems 
with  older  voting  systems,  includ¬ 
ing  the  so-called  dimpled  ballots 
that  caused  significant  strife  in 
Florida  in  particular  and  the  U.S. 
in  general  following  the  contested 
2000  presidential  race. 

The  act  left  all  50  states 
scrambling  to  comply  with  its 
mandates,  including  a  requirement 
that  manual  voting  systems,  such 
as  lever-activated  machines  and 
punch  cards,  be  replaced  with 
electronic  voting  machines.  It 
also  stipulates  that  every  voting 
precinct  in  the  country  must  have 
a  handicapped-accessible  voting 
machine  and  that  each  state  must 
create  a  comprehensive  database 
of  all  voters. 

The  legislation  also  provided 
$3  billion  in  funding  to  help  state 


Hopkins  University  in  Balti¬ 
more.  “This  has  the  potential 
to  destroy  the  legitimacy  of 
the  entire  process.” 

Rubin,  also  an  elections 
judge  in  Baltimore  County, 
Md.,  said  he  couldn’t  predict 
whether  there  will  be  e-voting 
problems  next  month.  How¬ 
ever,  he  noted,  “at  this  point, 
if  there’s  a  software  problem 

—  or,  worse,  if  the  ma¬ 
chines  have  been  rigged 

—  then  there’s  nothing 
officials  can  do.  They’ve 
dug  themselves  too  deep  s 
a  hole.” 

In  an  effort  to  avoid  □ 
such  problems,  the  Colo-  S 


and  local  elections  agencies 
buy  e-voting  machines  and 
train  poll  workers. 

The  law  required  that  all 
states  comply  with  the  man¬ 
dates  by  January  2006.  At 
least  one  state,  New  York,  was 
sued  by  the  U.S.  Department 
of  Justice  for  noncompliance. 

New  York  election  officials  say 
they  are  still  in  the  process  of 
procuring  e-voting  machines 
to  replace  lever  systems  long 
used  in  the  state. 

Several  state  officials  said 
that  the  law  provides  inadequate 
federal  funding  to  implement 
widespread  e-voting. 

Joe  Demma,  chief  of  staff  for  Utah 
Lt.  Gov.  Gary  Hebert,  said  his  state 
considers  the  law  an  underfunded 
mandate.  Demma  called  its  passage 
a  knee-jerk  reaction  by  Congress  to 
the  problems  in  Florida  in  2000.  "We 
weren’t  at  all  happy  about  it,  but  we 
were  elected  to  do  something  about 
complying  with  it,”  he  said. 

Demma  noted  that  as  Utah's  popu¬ 
lation  grows,  the  state  will  have  to  buy 
many  new  machines  -  likely  without 
the  help  of  federal  funds.  “It’s  going  to 
be  significant,”  he  said.  “We’re  disap¬ 
pointed  it’s  not  funded.  They  put  a  bad 
law  in  place,  and  we’re  stuck  with  it." 


rado  Democratic  Party  is  urg¬ 
ing  voters  to  cast  only  absen¬ 
tee  paper  ballots  because 
of  potential  problems  with 
e-voting  machines. 

When  he  was  working  in 
Emery  County,  Utah,  Funk 
brought  in  technical  experts 
to  hack  the  county’s  Diebold 
TSX  touch-screen  systems  in 
an  effort  to  determine  what  se¬ 
curity  measures  were  needed. 
Funk  left  his  county  elections 
post  following  the  test,  which 
demonstrated  security  haws 
that  he  felt  could  affect  the 
outcome  of  elections. 

“There  is  a  back  door  to  these 
machines,”  Funk  said.  “There 
is  such  a  myriad  of  things  that 
can  be  done  to  the  machines; 
officials  won’t  know  where  to 


Some  experts  believe  the  states 
have  now  been  locked  into  propri¬ 
etary  technology  that  could  require 
significant  state  and  local  funds  for 
maintenance  tasks. 

For  all  the  faults  of  the  old 
mechanical  lever  machines,  mainte¬ 
nance  was  certainly  cheap,  accord¬ 
ing  to  Maryland  elections  judge  and 
e-voting  critic  Aviel  Rubin.  “Oil  the 
gears,  and  they  lasted  for  decades," 
said  Rubin,  also  a  computer  science 
professor  at  Johns  Hopkins  Univer¬ 
sity.  “How  many  people  have  had  the 
same  computer  for  10  years?” 

-MARC  L.  S0NGINI 


SOURCE:  ELECTION  DATA  SERVICES  INC. 
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begin  to  address  them.” 

Electronic  voting  advocates, 
meanwhile,  contend  that  most 
concerns  about  e-voting  ma¬ 
chines  have  been  raised  by 
zealots  who  are  exaggerating 
the  problems. 

Top  election  officials  in 
Washington,  Texas,  Alaska, 
Georgia  and  Utah  maintain 
that  their  states  have  imple¬ 
mented  adequate  safeguards  to 
ensure  the  accuracy  and  secu¬ 
rity  of  touch-screen  systems. 

For  example,  Texas  has 
implemented  a  process  to 
certify  that  the  state’s  e-voting 
machines  are  “safe,  secure,  ac¬ 
curate,  reliable  and  verifiable,” 
said  a  spokesman  for  Secre¬ 
tary  of  State  Roger  Williams. 
“Our  office  is  confident  that  the 
systems  being  used  in  Novem¬ 
ber’s  election  will  meet  each  of 
these  characteristics.” 

Michael  Shamos,  a  com¬ 
puter  science  professor  at 
Carnegie  Mellon  University 
in  Pittsburgh  and  an  e-voting 
consultant,  asserted  that  fears 
about  e-voting  technology  are 
unfounded. 

Following  next  month’s  elec¬ 
tion,  he  predicted,  “winners 
will  be  sure  they  won,  regard¬ 
less  of  what  they  said  in  the 
past  about  the  machines.  The 
losers  will  also  contend  that 
they  won  and  that  the  ma¬ 
chines  stole  the  election  from 
them.  This  doesn’t  change.” 

A  DRE  machine,  properly 
used,  can  guide  a  user  through 
the  voting  process  using  a 
rigid  yes/no  format,  Shamos 
explained.  The  systems  can 
assist  disabled  people,  and 
they  support  multiple  languag¬ 
es,  he  said. 

Shamos  did  acknowledge 
that  it  generally  takes  three 


•1<  III 


For  the  Nov.  7 
national  election: 


rji|T*^  of  the  U.S.  voters 

[iMil  (66  million)  will 
|  use  touch  screen 
e-voting  machines. 


r  j  ?«nj  (84  million)  of  vot- 
j|l  ers  will  use  optical 
1  scan  gear. 


(|T«y  (12  million)  will  be 
1  liW  using  punch  card 
[and  iever  machines. 
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States  Create  Processes  to  Ease  E-voting  Concerns 


M 


I  The  state  has  done 
everything  to  be  sure 
there  is  no  messing  with  the 
stuff,  if  you  do  try  to  play  that 
game,  you’ll  be  going  to  jail. 

JOE  DEMMA,  CHIEF  OF  STAFF,  OFFICE  OF 
UTAH'S  LIEUTENANT  GOVERNOR 


SEVERAL  STATES  have  scrambled 
in  recent  months  to  establish  proc¬ 
esses  to  blunt  potential  problems 
with  electronic  voting  machines 
before  next  month’s  election. 

In  Georgia,  where  there  has 
been  widespread  use  of  e-voting 
machines  for  two  years,  training  and 
security  programs  are  credited  with 
keeping  complaints  about  e-voting 
to  a  minimum  there,  said  a  spokes¬ 
man  for  Secretary  of  State  Cathy  Cox. 

The  state  uses  AccuVote  TS  touch¬ 
screen  machines  from  Diebold  Elec¬ 
tion  Systems,  he  said. 

The  spokesman  said  much  of  the 
credit  for  the  successful  e-voting 
implementation  goes  to  technical 
staffers  from  Kennesaw  State  Uni¬ 
versity  who  have  worked  with  the 
state  since  plans  to  implement  e-vot¬ 
ing  systems  were  launched  in  2002. 

The  state  pays  the  university 
about  $500,000  annually  to  monitor 
elections  and  collaborate  with  elec¬ 
tion  workers,  he  said. 

The  state  mandates  that  all 
election  officials  be  trained  by  the 
Kennesaw  University  staff  in  e-vot- 
ing  security  procedures,  such  as 


maintaining  a  chain  of  custody  over 
machines  to  prevent  unauthorized 
tampering,  he  said. 

Georgia  has  also  joined  Utah  in 
prohibiting  the  storage  of  machines 
in  private  homes  prior  to  elections. 
Some  states,  including  California 
and  Florida,  allow  workers  to  take 
home  machines  that  will  be  used  in 
widely  scattered  voting  precincts.  Of¬ 
ficials  in  those  states  say  that  in  large 
precincts,  home  storage  provides 
for  easier  distribution  than  using  a 
centralized  facility. 

In  Utah,  election  officials  have 
established  a  policy  that  requires 
county  clerks  to  store  the  state's 
Diebold  TSX  touch-screen  machines 
in  secret,  secure  facilities  prior  to 
elections,  said  Joe  Demma,  chief  of 
staff  for  Utah  Lt.  Gov.  Gary  Hebert, 
whose  office  oversees  elections. 
Demma  noted  that  the  storage  sites 
are  not  even  revealed  to  his  office. 

He  said  that  such  policies  are  key 
to  avoiding  breaches  of  e-voting  ma¬ 
chines.  In  Utah,  Demma  said,  “you'd 
have  to  have  a  perfect  breach  of  one 
machine,  and  you'd  have  to  do  a  lot 
of  work  to  change  an  election.” 


Utah,  which  started  using  the 
machines  in  2005,  also  mandates 
audits  and  the  canvassing  of  votes 
after  the  election.  "The  state  has 
done  everything  to  be  sure  there  is 
no  messing  with  the  stuff.  If  you  do 
try  to  play  that  game,  you’ll  be  going 
to  jail,"  said  Demma. 

Ion  Sancho,  elections  supervisor 
in  Leon  County,  Fla.,  suggested  that 
statewide  e-voting  best  practices 
could  significantly  limit  potential 
problems.  Such  a  statewide  process 
has  not  been  created  in  Florida,  said 
Sancho,  and  problems  are  likely  to 
occur  in  his  state  next  month. 

“Every  election  supervisor  is  on 
their  own,"  he  said.  “We  are  all  hav¬ 


ing  to  deal  with  the  transition  to  new 
equipment  as  best  we  can  manage.” 

Sancho  created  his  own  proc¬ 
esses  for  e-voting  in  general  and 
security  in  particular  for  Leon  County, 
which,  like  the  rest  of  Florida,  uses  a 
blend  of  older  and  newer  technolo¬ 
gies.  The  county  mostly  uses  Diebold 
AccuVote  optical  scan  systems  and 
relies  on  Diebold  TSX  touch-screen 
systems  for  handicapped  people. 

Douglas  Jones,  an  e-voting  ex¬ 
pert  and  a  professor  in  the  University 
of  Iowa's  computer  science  depart¬ 
ment,  urged  poll  workers  to  keep 
an  eye  out  for  potential  technical 
problems. 

-  MARC  L.  SONGINI 


elections  to  adequately  train 
poll  workers  in  the  use  of 
e-voting  machines  and  famil¬ 
iarize  them  with  the  e-voting 
process.  Thus,  he  said,  mis¬ 
takes  in  setting  up  machines, 
booting  them  up  and  printing 
reports  are  likely  in  the  com¬ 
ing  election.  “Nothing  fatal, 
but  plenty  for  people  to  yell 
about,”  Shamos  said. 

Sam  Reed,  secretary  of 
state  for  the  state  of  Wash¬ 
ington  and  past  president  of 
the  National  Association  of 
Secretaries  of  State,  said  some 
problems  are  likely  occurring 
simply  because  new  systems 
are  being  used.  “We  know  that 
at  any  time  you  convert  to  a 
new  system,  snafus  are  bound 
to  [happen],”  he  said. 

Reed  also  said  he  expects 
that  the  vendors  of  DRE  ma¬ 
chines  “will  be  spread  awfully 
thin”  trying  to  provide  training 
and  support  services  through¬ 
out  the  country. 

In  next  month’s  election, 
e-voting  machines  will  be  used 
in  five  Washington  counties, 
he  said.  In  those  counties,  the 


machines  will  include  a  so 
called  voter-verified  paper  trail, 
which  has  eased  the  fears  of 
some  critics,  Reed  said.  Sys¬ 
tems  that  produce  paper  rec¬ 
ords  of  votes  will  also  be  used 
in  Ohio  and  California. 

The  paper  trail  allows  vot¬ 
ers  to  view  a  printed  copy  of 
their  selections  that  is  stored 
in  or  on  the  machine.  Election 
workers  can  match  the  paper 
votes  to  the  records  in  the  ma¬ 
chine’s  memory  card  to  ensure 
that  tabulations  are  accurate. 

Critics  of  the  paper-trail 
technology  have  noted  that 
it  can  be  difficult  to  load  and 
operate  and  that  it  can  com¬ 
promise  the  anonymity  of 
voters.  Rubin  also  contended 
that  hackers  can  rig  a  machine 
to  print  receipts  that  don’t 
match  the  actual  vote  and  that 
matching  paper  ballots  to  the 
database  is  a  more  difficult 
chore  than  advertised. 

Federal  legislation  proposed 
by  Rep.  Rush  Holt  (D-N.J.)  in 
February  to  mandate  that  each 
e-voting  machine  provide  a 
paper  trail  has  gained  200  co- 


Election  Day 

Tips  for  election  workers: 


*  Expect  that  some  system  or 
process  will  break  down. 

■  Double-check  all  results  - 
make  sure  the  number  of  voter 
matches  the  number  of  ballots. 


■  Create  a  paper  record  of 
all  votes  to  be  stored  locally 
before  transmitting  results  to 
the  state. 


■  Check  the  paper  record 
against  the  official  totals  that 
are  published  by  state  or  fed¬ 
eral  agencies. 

■  Randomly  audit  machine- 
counted  paper  ballots. 


sponsors  but  has  not  been  put 
to  a  vote  in  Congress. 

A  spokesman  for  Election 
Systems  &  Software  Inc.,  an 
Omaha-based  manufacturer  of 
optical  scan  and  DRE  systems, 
said  recent  criticism  of  the 
technology  “ignores  the  fact 
[that]  touch-screen  voting  has 
worked  over  the  past  several 


years.  The  systems  are  tested 
very  rigorously  to  ensure  that 
they  function  as  intended.” 

A  spokesman  for  Diebold 
Election  Systems  Inc.  in  Allen, 
Texas,  noted  that  critics  of  the 
technology  “made  the  same 
dire  predictions  before  the 
last  presidential  election,  yet 
across  the  country,  the  touch¬ 
screen  systems  performed  ex¬ 
tremely  well.  They  were  actu¬ 
ally  more  accurate  than  other 
forms  of  voting  and  much 
more  accessible  to  people  with 
special  needs.” 

Kay  Brown,  spokeswoman 
for  the  Alaska  Democratic 
Party,  which  has  charged  that 
voting  records  from  2004  elec¬ 
tion  in  the  state  were  accessed 
and  altered  after  the  election, 
contended  that  there  should 
be  a  national  standard  for 
e-voting  systems. 

“I  think  that  we  need  major 
reform,”  Brown  said.  “We 
need  to  get  away  from  propri¬ 
etary  software.  Everything 
about  the  election  should  be 
open  to  public  inspection  and 
transparent.” » 


YOU  ALWAYS  HAD 
THE  BRAINS. 

THE  TECHNOLOGY 
THAT  WAS  A  LITTLE 
SCATTERED. 
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Dual-Core  is  a  new  technology  designed  to  improve  performance  of  multithreaded  software  products  and  hardware-aware  multitasking  operating  systems  and  may  require  appropriate  operating  system  software  for  full  benefit;  check  with  software  provider  to 
determine  suitability;  not  all  customers  or  software  applications  will  necessarily  benefit  from  use  of  this  technology.  Requires  a  separately  purchased  64-bit  operating  system  and  64-bit  software  products  to  take  advantage  of  the  64-bit  processing  capabilities  of 
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Use  the  HP  BladeSystem  c-Class  for  your  business  and  you'll  experience 
greater  control  over  your  time  and  resources. 


To  experience  the  HP  BladeSystem  and  download 
IDC  White  Papers,  go  to  YouAlwaysHadlt.com/brains4 

Call  1-866-625-4090  or  visit  your  local  reseller 


Introducing  the  new  HP  BladeSystem  c-Class 
with  Insight  Control  Management. 


The  new,  intuitive  HP  BladeSystem  c-Class 
thinks  just  like  you  do  —  letting  you  monitor 
your  infrastructure  while  helping  to 
analyze  your  future  needs.  First,  HP's 
OnBoard  Administrator  gives  you  out-of- 
the-box  setup  and  configuration  combined 
with  power,  cooling  and  enclosure  management.  After  that,  the  Insight 
Control  software  steps  in  to  let  you  control  the  rest  of  your  environment, 
locally  or  remotely.  And  thanks  to  the  integrated  Insight  Display  — our 
unique  LCD  screen— you  can  interact  right  at  the  source  to  manage, 
deploy  or  troubleshoot. 


Simply  plug  in  the  HP  ProLiant  BL460c  server  blade,  featuring 
Dual-Core  Intel®  Xeon®  Processors,  and  you'll  get  faster  performance 
and  the  versatility  to  support  32-  and  64-bit  computing  environments. 


he  Dual-Core  Intel  Xeon  Processor.  Given  the  wide  range  of  software  applications  available,  performance  of  a  system  including  a  64-bit  operating  system  will  vary.  Intel's  numbering  is  not  a  measurement  of  higher  performance.  Intel,  the  Intel  Logo,  Xeon  and  Xeon 
nside  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries.  The  information  contained  herein  is  subject  to  change  without  notice.  ©2006  Hewlett-Packard  Development  Company.  L.P. 
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Oracle  Tops  Century  Mark 
With  Latest  Patch  Release 


Vendor  issues  101  software  fixes  as  part 
of  quarterly  update;  more  on  the  way 


BY  JAIKUMAR  VIJAYAN 

ORACLE  CORP.  last 
week  released  a 
total  of  101  software 
patches  to  fix  se¬ 
curity  vulnerabilities  across 
its  entire  product  line.  It  de¬ 
scribed  45  of  the  patches  as  be¬ 
ing  aimed  at  flaws  that  could 
be  remotely  exploited  without 
requiring  any  authentication. 

The  company  said  an  un¬ 
specified  number  of  additional 
patches  that  are  still  in  the 
works  will  be  issued  this  week. 

Among  Oracle’s  latest  quar¬ 
terly  patch  releases  were  63 
fixes  for  its  databases  and 
supporting  products,  14  for  its 
application  server  software, 

13  for  its  E-Business  Suite  ap¬ 
plications  and  nine  for  the 
PeopleSoft  and  J.D.  Edwards 
applications  that  the  com¬ 
pany  acquired  when  it  bought 
PeopleSoft  Inc.  early  last  year. 
Oracle  moved  to  the  quar¬ 


terly  security-fix  schedule  in 
November  2004  in  response 
to  user  demands  for  a  more 
streamlined  patching  process. 
Since  then,  the  vendor  has 
come  “a  long  way”  in  improv¬ 
ing  its  procedures,  said  Rich 
Niemiec,  a  former  president  of 
the  International  Oracle  Users 
Group  and  CEO  of  TUSC,  an 
Oracle-oriented  consulting 
firm  in  Lombard,  Ill. 

Feedback  Considered 

For  example,  increased  docu¬ 
mentation  that  Oracle  started 
making  available  with  the  lat¬ 
est  batch  of  fixes  —  including 
a  list  of  the  remotely  exploit¬ 
able  flaws  —  makes  it  easier 
for  IT  managers  to  identify 
relevant  patches  and  calculate 
the  resources  required  to  in¬ 
stall  them,  Niemiec  said.  He 
added  that  Oracle  officials 
often  solicit  feedback  from 
users  on  how  the  company  is 


doing  on  its  patches. 

But  Amichai  Shulman,  chief 
technology  officer  at  security 
software  vendor  Imperva  Inc. 
in  Foster  City,  Calif.,  said  one 
concern  for  users  is  that  at 
least  five  of  the  22  database- 
specific  flaws  addressed  by 
last  week’s  updates  appear  to 
be  similar  to  vulnerabilities 
that  Oracle  supposedly  had 
patched  previously.  “There  is 
something  alarming  about  this 
trend  of  the  same  vulnerability 
repeating  itself  in  the  same  data¬ 
base  package,”  Shulman  said. 

David  Litchfield,  managing 
director  of  Next  Generation 
Security  Software  Ltd.  in 
Surrey,  England,  said  that  in 
principle,  Oracle’s  decision  to 
move  to  a  quarterly  schedule 
on  patches  was  sound.  But  “in 
practice,  all  the  benefits  that 
regular  patch  releases  offer 
are  negated  because  they  fail 
to  keep  to  their  committed 
schedules,”  he  added. 

For  instance,  the  latest 
round  of  patches  didn’t  include 
fixes  for  several  database  ver¬ 


EMC  Adds  Dual-Protocol  Support  to  Clariion 


BY  SHARON  FISHER 

EMC  Corp.  today  is  set  to 
unveil  two  upgraded  Clariion 
CX3  midrange  storage  arrays 
that  support  both  fibre  Chan¬ 
nel  and  iSCSI  protocols. 

The  company  will  also  bring 
out  new  monitoring  software 
for  the  Clariion  arrays  and 
new  models  in  its  Symmetrix 
and  Celerra  lines. 

Tom  Henson,  infrastructure 
manager  at  Molex  Inc.  in  Chi- 
v.-go,  said  the  maker  of  electri¬ 
cal  connectors  beta-tested  the 
upgraded  Clariion  CX3-40 
Fibre  Channel/iSCSI  system 
and  found  it  easy  to  use.  But 
he  noted  that  his  company  has 
no  plans  to  purchase  one  of 
the  arrays  at  this  point. 

Molex  currently  runs  an 
EMC  Fibre  Channel  array  at 
its  headquarters  and  EMC 


Clariion  CX300i  iSCSI  storage 
systems  at  two  remote  offices. 

Henson  said  that  the  com¬ 
pany  will  further  evaluate 
the  new  Clariion  models  for 
possible  purchase  when  the 
Clariion  CX700  Fibre  Channel 
system  used  at  its  headquar¬ 
ters  reaches  the  end  of  its  life. 

EMC  doesn’t  plan  to  add 
iSCSI  support  to  the  Clariion 
CX3-80,  the  other  member  of 
the  CX3  family,  said  Barbara 
Robidoux,  the  vendor’s  vice 
president  of  storage  product 
marketing. 

John  Hegner,  vice  president 
of  technology  services  at  Lib¬ 
erty  Medical  Supply  Inc.  in 
Port  Saint  Lucie,  Fla.,  said  dual¬ 
protocol  arrays  are  a  natural 
progression  for  EMC. 

Nonetheless,  Hegner  said 
his  organization  has  no  plans 


to  expand  beyond  its  EMC 
Fibre  Channel  systems  at  this 
point,  though  Liberty  Medical 
will  consider  the  new  offering. 

The  new  systems  are  avail¬ 
able  now.  Upgrades  from  the 
current  models  will  be  avail¬ 
able  in  90  days,  according  to 
Robidoux. 

EMC’s  new  Navisphere 
Quality  of  Service  Manager 
software  runs  on  all  of  the 
Clariion  systems,  and  it  can  be 
used  to  monitor  and  optimize 
their  performance. 

EMC  also  announced  an 
entry-level  version  of  its  Sym¬ 
metrix  high-end  storage  array, 
five  new  models  in  its  Celerra 
line  of  network-attached  stor¬ 
age  systems  and  three  disk 
libraries  that  use  the  com¬ 
pany’s  UltraScale  4Gbit/sec. 
technology.  > 


sions  in  which  flaws  have  been 
discovered,  Litchfield  said.  He 
also  claimed  that  Oracle  has 
often  re-released  patches  be¬ 
cause  of  problems  with  them. 
In  fact,  the  only  time  Oracle 
has  had  all  of  its  planned  fixes 
ready  on  the  appointed  day  or 
didn’t  subsequently  re-release 
any  of  them  was  with  the  up¬ 
dates  it  put  out  in  July,  accord¬ 
ing  to  Litchfield.  “Getting  it 
right  one  out  of  eight  times  is 
abysmal,”  he  said. 

In  a  posting  on  its  security 
blog,  Oracle  said  that  more 
than  one-third  of  the  vulner¬ 
abilities  patched  last  week  “are 
in  an  optional  product  and  do 
not  affect  most  customers.” 

Responding  to  the  com¬ 
ments  of  Shulman  and  Litch¬ 
field,  an  Oracle  spokeswoman 


Patch  Parameters 


Key  facts  about  Oracle’s 
quarterly  software  update: 

■  The  vendor  said  it  is  releasing 
101  fixes  designed  to  address 
separate  vulnerabilities. 

■  45  of  the  patches  are  for 
flaws  that  can  be  remotely  ex¬ 
ploited  without  authentication. 

■  The  highest  risk  rating  that 
Oracle  gave  a  database  flaw 
was  4.2  on  a  scale  of  1  to  10, 
using  the  standard  CVSS  metric. 


said  that  since  most  of  the 
company’s  patches  are  cumu¬ 
lative,  they  contain  security 
fixes  that  may  have  been  in¬ 
cluded  in  previous  patches. 

She  added  that  Oracle  some¬ 
times  delays  patch  releases 
because  it  needs  more  time 
to  test  or  modify  a  fix  “so  it 
meets  our  quality  exit  criteria.” 
Patches  that  were  missing 
from  last  week’s  release  will 
be  made  available  by  tomor¬ 
row,  the  spokeswoman  said.  ► 


Users  Look  for  Details  on 
Next  Oracle  DB  Release 


AT  ITS  ANNUAL  OpenWorld 
conference  in  San  Francisco  this 
week,  Oracle  is  expected  to  divulge 
details  about  the  enhancements  it 
plans  to  make  in  the  next  version  of 
its  flagship  database,  which  began 
initial  beta  testing  last  month. 

Oracle  last  week  declined  to 
comment  about  any  new  products. 
But  users  and  analysts  said  they 
expect  the  next  release  to  include 
enhancements  to  the  database’s 
grid  computing,  clustering  and  XML 
capabilities,  as  well  as  new  security 
features  and  increased  automation 
to  ease  database  administration 
tasks  for  smaller  companies. 

Oracle  released  the  first  beta  of 
the  software  last  month,  said  Ari 
Kaplan,  president  of  the  Interna¬ 
tional  Oracle  Users  Group.  For  now, 
the  planned  upgrade  is  mostly 
being  referred  to  by  users  as  11g, 
hewing  to  the  naming  convention 
Oracle  used  when  it  released  Ver¬ 
sion  lOg  of  its  database  in  2004. 

Kaplan,  a  senior  consultant 
at  Datalink  Corp.  in  Chanhassen, 
Minn.,  said  he  has  seen  the  11g 


beta  release  but  he  declined  to  dis¬ 
close  specific  information  about  its 
contents.  But  he  did  say  the  beta 
includes  new  features  related  to 
Oracle’s  Real  Application  Clusters 
technology,  its  grid  management 
capabilities,  its  handling  of  XML, 
service-oriented  architectures,  se¬ 
curity  and  its  PL/SQL  development 
language.  "There’s  a  lot  of  exciting 
functionality,”  Kaplan  said. 

Donald  Burleson,  an  Oracle 
consultant  and  author  in  Kittrell, 

N.C.,  was  less  wowed  than  Kaplan, 
describing  fig  as  “a  minor  move 
up,”  with  its  most  salient  features 
likely  to  be  in  the  area  of  simplifying 
database  administration.  “They’re 
trying  to  make  Oracle  so  simple  a 
12-year-old  could  install  it,"  he  said. 

Amichai  Shulman,  chief  technol¬ 
ogy  officer  at  security  software 
vendor  Imperva  Inc.,  said  Oracle 
needs  to  clean  up  “rotten  code” 
that  was  left  over  in  lOg  from  older 
versions  and  is  responsible  for 
many  of  the  security  holes  discov¬ 
ered  in  Oracle’s  databases  this  year. 

-ERIC  LAI 


Remember  when  technology 
had  the  ability  to  amaze  you? 


Believe  again. 

Now  you  can  believe  in  a  new  kind  of  IT  management.  Unified  and  simplified 
to  make  your  business  more  productive,  nimble,  competitive  and  secure. 

We  all  know  that  companies  are  demanding  more  -  expecting  IT  to  provide  a 
strategic  and  competitive  advantage.  Yet  today's  complex  environments  require  you 
to  manage  across  point  solutions,  siloed  organizations  and  redundant  technology. 

A  better  alternative?  Choose  an  integrated  approach  to  IT  management. 

An  approach  in  which  software  unifies  your  people,  processes  and  technology  to 
increase  efficiency  and  optimization.  Only  one  global  software  company  can  do 
that.  CA,  formerly  known  as  Computer  Associates,  has  focused  solely  on  IT 
management  software  for  over  30  years. 

The  technology  vision  that  makes  this  promise  real  is  called  Enterprise  IT 
Management,  or  EITM.  At  its  heart  is  the  CA  Integration  Platform  -  a  common 
foundation  of  shared  services  that  gives  you  real-time,  dynamic  control  and  flexibility. 
Its  greatest  benefit?  CA  software  solutions  come  to  you  already  integrated,  and  able 
to  integrate  with  your  existing  technology  to  optimize  your  entire  environment. 

Ultimately,  well-managed  IT  gives  you  the  visibility  and  control  you  need  to  manage 
risk,  manage  costs,  improve  service  and  align  IT  investments.  To  learn  more  about 
how  CA  and  our  wide  array  of  partners  can  help  you  unify  and  simplify  your  IT 
management,  visit  ca.com/unify. 
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Vista  to  Ship  on  Time  in 
Europe,  Microsoft  Says 

BRUSSELS 

ICROSOFT  CORP.  has  agreed 
to  make  changes  to  Windows 
Vista  to  satisfy  European  regula¬ 
tors  and  said  it  will  ship  the  new  oper¬ 
ating  system  on  schedule. 

The  company  had  warned  last  sum¬ 
mer  in  a  filing  with  the  U.S.  Securities 
and  Exchange  Commission  that  “un¬ 
certainties”  surrounding  regulatory 
battles  in  Europe  “could  delay  release 
dates  for  Windows”  there. 

Microsoft  CEO  Steve  Ballmer  con¬ 
firmed  in  a  mid-October  conversation 
with  European  Commission  Competi¬ 
tion  Commissioner  Neelie  Kroes  that 
Vista  will  ship  on  schedule.  It  will 
go  on  sale  to  large  com¬ 
puter  manufacturers  next 
month  and  to  consumers 
in  January,  Microsoft  said. 

In  a  statement,  Micro¬ 
soft  said  it  has  made 
changes  to  Vista  that  ad¬ 
dress  the  concerns  of  the 
European  Commission. 

“We  are  committed  to  ad¬ 
hering  to  local  law  in  ev¬ 
ery  region,”  Ballmer  said. 

In  September,  Microsoft 
had  accused  the  EC  of  not 
providing  clear  guidance 
on  whether  Vista  would  pass  muster 
under  European  antitrust  law. 

■  PETER  SAYER,  ID6  NEWS  SERVICE 


Siemens  Overhauls 
IT  Service  Operation 

MUNICH 

iemens  AG  has  decided  to  keep 
but  completely  overhaul  its 
money-losing  IT  services  and 
software  operations. 

Siemens  said  a  new  entity,  Siemens 
IT  Solutions  and  Services,  will  replace 
the  current  Siemens  Business  Services 
(SBS)  operation  in  January. 

The  group  will  oversee  all  of  the 
company’s  worldwide  IT  services  and 
software  activities,  including  four  soft¬ 
ware  development  operations:  Program 
and  System  Engineering,  Siemens  In¬ 
formation  Systems,  Development  Inno¬ 
vation  and  Projects,  and  the  Business 
Innovation  Center. 

Christoph  Kollatz,  group  president  of 
SBS,  will  be  president  of  the  new  ven¬ 
ture  and  will  have  a  mandate  to  slash 


costs  by  €1.5  billion  ($1.9  billion  U.S.) 
by  mid-2007. 

The  unit  is  expected  to  generate 
annual  sales  of  around  €5  billion 
($6.3  billion  U.S.)  and  employ  about 
43,000  workers. 

■  JOHN  BLAU,  IDG  NEWS  SERVICE 


EU  Launches  Telecom 
Infringement  Cases 

BRUSSELS 

HE  EUROPEAN  COMMISSION 
this  month  initiated  nine  new 
infringement  cases  against  Euro¬ 
pean  Union  governments  for  failing  to 
honor  telecommunications  laws. 

The  EC  also  opened  second-stage 
infringement  proceedings  against  eight 
countries  and  said  that  nine  ongoing 
cases  have  been  closed. 

Most  of  the  cases  were 
filed  against  countries 
that  had  failed  to  com¬ 
plete  work  on  assessing 
the  status  of  competition 
in  their  national  markets 
and  did  not  have  telecom¬ 
munications  infrastruc¬ 
tures  capable  of  provid¬ 
ing  caller  location  data  to 
emergency  personnel. 

“The  commission 
remains  vigilant  in  en¬ 
suring  that  the  EU’s  reg¬ 
ulatory  framework  for  electronic  com¬ 
munications  is  correctly  implemented,” 
said  Viviane  Reding,  commissioner  of 
the  Information  Society  and  Media  Di¬ 
rectorate  General.  She  added  that  “the 
single  European  emergency  number 
112  needs  to  be  urgently  addressed  in 
all  member  states.” 

■  PAUL  MELLER,  IDG  NEWS  SERVICE 


Wipro  Chief  Downplays 
Indian  Staff  Shortages 

BANGALORE,  INDIA 

IPRO  LTD.  Chairman  Azim 
Premji  last  week  downplayed 
the  impact  of  technical  staff 
shortages  in  India,  saying  they  won’t 
hold  back  the  country’s  outsourcing 
industry. 

Indian  outsourcers  are  overcoming 
the  shortage  by  hiring  science  gradu¬ 
ates  and  retraining  them  for  engineer¬ 
ing  work,  Premji  said. 

Last  December,  McKinsey  &  Co.  in 
New  York  and  the  National  Associa¬ 
tion  of  Software  and  Service  Compa- 
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Projected  number  of 
business  subscribers 
for  Fixed  Mobile 
Convergence  systems 
in  China  by  2010,  up 
From  400,000  in  2005. 

SOURCE:  IN-SIAL 


nies  in  New  Delhi  forecast  a  shortage 
of  500,000  engineering  workers  for 
India’s  outsourcing  industry  by  2010. 
Premji  contends  that  much  of  the  out¬ 
sourcing  work  currently  done  by  engi¬ 
neers  is  suited  to  science  graduates. 

Wipro  and  competitors  Infosys 
Technologies  Ltd.  in  Bangalore  and 
Tata  Consultancy  Services  Ltd.  in 
Mumbai  are  also  expanding  in  China 
and  Eastern  Europe  to  supplement 
their  Indian  staffs. 

The  shortages  emerged  as  multi¬ 
national  services  companies  such 
as  Electronic  Data  Systems  Corp., 
Accenture  Ltd.  and  IBM  set  up  opera¬ 
tions  in  India  to  take  advantage  of 
low  labor  costs. 

As  jobs  opened  up  at  those  compa¬ 
nies,  Bangalore-based  Wipro’s  attrition 
rate  started  to  grow,  reaching  15.9%  in 
the  quarter  that  ended  Sept.  30.  Sudip 
Banerjee,  president  for  enterprise  solu¬ 
tions  in  Wipro’s  technologies  division, 
said  that  the  attrition  is  mostly  in  entry- 
level  jobs  and  that  it  doesn’t  concern 
the  company. 

■  JOHN  RIBEIR0,  IDG  NEWS  SERVIGE 


EU  Parliament  to  Fight 
Airline  Passenger  Pact 

BRUSSELS 

SOME  members  of  the  European 
Parliament  are  gearing  up  for  a 
fight  over  data  privacy  following 
a  temporary  agreement  by  EU  justice 
ministers  to  provide  airline  passenger 
data  to  U.S.  authorities. 

Many  members  of  parliament 
criticized  the  deal  signed  earlier  this 
month,  which  grants  U.S.  government 
agencies  greater  access  to  passenger 
records  than  did  an  earlier  agreement 
that  was  deemed  illegal  by  the  Euro¬ 
pean  Court  of  Justice  in  May. 

“The  European  Union  has  com¬ 
pletely  capitulated  to  U.S.  demands  on 
this  issue,”  said  European  Parliament 
member  Sylvia  Kaufmann,  who  is  part 
of  the  European  United  Left/Nordic 
Green  Left  alliance. 

“The  fact  that  the  CIA  will  have 
access  to  passenger  data  is  the  real 
scandal,  especially  when  one  considers 
that  the  right  of  redress  held  by  U.S. 
citizens  is  not  extended  to  EU  citizens,” 
she  added. 

The  Court  of  Justice  ruled  in  May 
that  the  old  agreement  would  become 
void  at  the  end  of  September.  The  new 
temporary  agreement  is  valid  until  July 
2007  and  will  have  to  be  replaced  by  a 
longer-term  agreement. 

■  PAUL  MELLER,  IDG  NEWS  SERVICE 
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Briefly  Noted 

NEC  Corp.  in  Tokyo  has  sold  its 
Packard  Bell  BV  unit  to  companies 
controlled  by  John  Hui,  the  former 
owner  of  eMachines  Inc.,  for  an  un¬ 
disclosed  sum.  Packard  Bell,  which 
sells  PCs  and  other  consumer  elec¬ 
tronics  products  in  Europe,  the 
Middle  East,  Africa  and  South 
America,  had  revenue  of  €1.3  billion 
($1.6  billion  U.S.)  in  the  year  that 
ended  in  March  2606,  NEC  said. 

■  MARTYN  WILLIAMS, 

IDG  NEWS  SERVICE 


Nokia  Corp.  completed  its  acqui¬ 
sition  of  GateS  AG,  a  navigation 
software  maker,  earlier  this  month, 
just  days  after  licensing  hundreds 
of  navigation  patents  from  Trimble 
Navigation  Ltd.  Gate5  will  become 
part  of  Nokia’s  multimedia  busi¬ 
ness  group  and  will  still  be  based  in 
Berlin.  The  move  is  part  of  Espoo, 
Finland-based  Nokia’s  strategy  to 
control  new  technologies  that  can 
be  integrated  into  mobile  phones. 

■  NANCY  G0HRING, 

IDG  NEWS  SERVICE 


Mitsubishi  Electric  Corp.  said  its 
U.S.  unit,  Mitsubishi  Electric  &  Elec¬ 
tronics  U.S.A.  Inc.  in  Cypress,  Calif., 
has  received  a  subpoena  from  the 
U.S.  Department  of  Justice  to  pro¬ 
duce  information  regarding  sales  of 
static  RAM  chips.  The  Tokyo-based 
parent  company  acknowledged 
receipt  of  the  subpoena  but  declined 
further  comment  last  week. 

■  MARTYN  WILLIAMS, 

IDG  NEWS  SERVICE 


Evesham  Technology  Ltd.  and 

Tranquil  PC  Ltd.  have  built  computers 
that  use  Taipei-based  Via  Technolo¬ 
gies  Inc.’s  C-7D  processor,  which 
promises  to  reduce  the  environmen¬ 
tal  impact  of  PCs.  Evesham,  England- 
based  Evesham’s  Crusader  Carbon  3 
PC  has  a  C-7D  processor  and  256MB 
of  memory.  Details  of  Carrington, 
England-based  Tranquil’s  C7-D  sys¬ 
tem  weren't  available  at  press  time. 
■  SUMNER  LEMON, 

IDG  NEWSSERVICE 


Ingres  Corp.  has  opened  an  op¬ 
eration  in  New  Delhi,  continuing  an 
effort  to  expand  around  the  world. 
Ingres  last  week  named  Vivek 
Bhatnagar  director  of  business 
development  and  global  alliances. 
Bhatnagar  is  responsible  for  in¬ 
creasing  Ingres'  business  in  India. 
■  CHINA  MARTENS, 

IDG  NEWS  SERVICE 


How  the  Doughboy  graces  millions  ot 
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Electric  Grid  Operator 
Consolidates  BI  Tools 

Replaces  Business  Objects,  Microsoft 
reporting  tools  with  Actuate  products 


BY  HEATHER  HAVENSTEIN 

HE  COMPANY  that 
coordinates  the 
buying  and  selling 
of  wholesale  elec¬ 
tricity  for  80%  of  California  is 
standardizing  on  new  business 
intelligence  tools  as  part  of  a 
major  corporate  technology 
upgrade. 

Over  the  past  year,  the 
California  Independent  Sys¬ 
tem  Operator  (ISO)  has  been 
replacing  Excel  spreadsheets 
and  reporting  tools  from  Busi¬ 
ness  Objects  SA  and  Microsoft 
Corp.  with  query,  reporting 
and  analysis  tools  from  San 
Francisco-based  Actuate  Corp., 
said  Steve  Berberich,  CIO  and 
vice  president  of  technology  at 
the  electric  grid  operator. 

The  BI  initiative  is  running 
in  tandem  with  a  project  to  up¬ 
grade  the  specialized  core  IT 
systems  that  provide  the  ISO’s 
internal  users  with  electricity 
demand  data,  prices  and  the 
ability  to  settle  transactions, 
Berberich  said. 

The  project  is  slated  to  be 
completed  in  November  2007. 

The  ISO  manages  the  flow 
of  electricity  along  California’s 
wholesale  power  grid,  coor¬ 
dinating  40,000  transactions 
every  hour  between  buyers 
and  sellers.  The  not-for-profit 
electric  grid  operator’s  IT  sys¬ 
tems  are  also  used  to  manage 
demand  forecasts,  track  prices 
and  settle  transactions. 

“The  data  that  we  provide 
and  how  we  provide  it  actually 
facilitates  the  market,”  Berber¬ 
ich  said.  “We’re  very  demand¬ 
ing  in  what  we  use.  Because 
of  the  role  we  play,  it  was  im¬ 
portant  to  have  a  bullet-proof 
product  and  one  ...  we  knew 
could  integrate  with  our  new 
applications.” 

The  ISO  will  use  the  Actu¬ 
ate  tools  to  marry  historical 
data  with  real-time  informa¬ 


tion  so  users  can  have  online 
access  to  reports  containing 
scheduled  energy  loads  and 
forecasts.  As  a  result,  energy 
companies  will  be  able  to 
more  easily  access  online 
information  to  better  plan  for 
production  and  establish  pric¬ 
ing,  Berberich  said. 

He  said  the  upgrade  is  an 
opportunity  for  the  grid  opera¬ 
tor  to  eliminate  some  of  the 
costs  associated  with  main¬ 
taining  separate  BI  tools.  He 
added,  though,  that  it  would  be 


BY  MATT  HAMBLEN 

Former  Sun  Microsystems  Inc. 
executive  Mark  Canepa  was 
named  president  and  CEO  of 
Extreme  Networks  Inc.  on  Aug. 
30.  Since  then,  the  company  has 
received  notice  that  it  may  be 
delisted  from  the  Nasdaq  Stock 
Market  for  delaying  its 
year-end  financial  filings, 
and  it  has  appointed  a 
committee  to  investigate 
its  stock-option  grant 
practices.  In  an  interview 
with  Computerworld, 

Canepa  talked  about 
those  issues,  the  compa¬ 
ny’s  declining  revenue 
and  the  growing  threat  of 
Cisco  Systems  Inc.,  which 
dominates  the  switching  and 
routing  markets  for  large  com¬ 
panies  and  telecommunications 
service  providers. 

What  are  customers  asking  about 
Extreme’s  financial  performance? 

Customers  want  a  really  good 
high-quality  product  at  a  rea¬ 
sonable  price.  They  also  want 
a  sales  force  and  a  service 
organization  that’s  there  when 
they  need  them.  The  third 
thing  they  [want]  is  a  company 
that  will  be  around  for  a  long 


difficult  to  estimate  the  exact 
cost  savings  associated  with 
standardizing  on  BI  tools. 

“We  are  creating  value  on  a 
number  of  fronts,”  Berberich 
said.  “First,  we  have  reduced 
support  costs  because  we 
don’t  have  so  many  disparate 
reporting  tools.  Training  costs 
are  reduced  because  we  don’t 
have  to  train  on  a  collection 
of  tools.” 

Berberich  also  said  workers 
will  be  more  efficient  because 
they  won’t  have  to  use  sepa¬ 
rate  tools  for  different  tasks. 

While  he  acknowledged  that 
it’s  generally  difficult  to  get 
BI  users  to  change  tools,  the 


time  that  they  can  count  on  to 
do  business  with.  I  think  we’ve 
been  able  to  convince  custom¬ 
ers  we  have  all  three. 

How  are  customers  reacting  to 
the  possible  Nasdaq  delisting,  and 
to  an  inquiry  into  Extreme’s  stock- 
options  practices?  We 

have  talked  to  lots  of 
customers.  First,  we’ve 
got  lots  of  company. 
Hundreds  of  technol¬ 
ogy  companies  are  fac¬ 
ing  [investigations  into 
stock-options  practices], 
and  there  will  be  lots 
more.  [The  investiga¬ 
tion]  is  just  a  thing.  It 
doesn’t  affect  the  equip¬ 
ment;  it  doesn’t  affect  any¬ 
thing,  really,  in  the  company. 
It’s  not  clear  there’s  going  to 
be  a  restatement  of  the  annual 
report.  There  is  only  a  delay  in 
the  filing  of  the  Extreme  10-K. 

I  spend  very  little  time  wor¬ 
rying  about  it.  We’ll  see  what 
the  outcome  is,  if  any.  That’s 
what  we’ve  been  telling  cus¬ 
tomers,  and  that’s  what  we’ve 
been  telling  the  sales  force. 

How  important  are  enterprise 
customers  to  Extreme,  compared 


The  California  ISO,  which  manages 
the  flow  of  electricity  along  the 
state’s  wholesale  power  grid,  is  up¬ 
grading  its  BI  and  core  IT  systems. 


ISO  has  so  far  been  success¬ 
ful  in  its  effort  by  clearly  lay¬ 
ing  out  the  advantages  of  the 
new  products.  Officials  have 
worked  to  create  a  “bit  of  ex¬ 
citement  around  the  new  prod- 


with  telecom  carriers?  Most 
of  our  revenue  comes  from 
the  enterprise  space,  so  it  is 
a  hugely  important  customer. 
The  carriers  have  leading- 
edge  requirements.  The  car¬ 
rier  innovations  carry  over  to 
the  enterprise  world.  Extreme 
has  a  fraction  of  its  business 
from  the  carrier  space,  but  we 
carry  that  over.  We’re  good  at 
bringing  it  to  the  enterprise, 
with  the  right  cost  structure. 

What  is  Extreme’s  technology  di¬ 
rection?  Our  technology  direc¬ 
tion  is  pretty  simple.  You  have 
got  to  understand  the  network 
very  well.  That  means  be¬ 
ing  able  to  get  at  the  heart  of 
those  IP  packets  and  under¬ 
stand  the  flow  that’s  coming 
to  them.  That  requires  pretty 
sophisticated  hardware  and 
software,  which  the  company 
is  built  upon.  Then  it  requires 
building  products  able  to  ex¬ 
ploit  that  and  knowing  what 
markets  are  receptive  to  those 
features. 

Am  I  correct  in  concluding  that 
Extreme  won’t  be  making  any 
major  strategic  changes  soon? 

At  a  strategic  level,  I  don’t 


uct”  that  may  make  it  more  at¬ 
tractive  to  users  than  the  tools 
now  in  use,  Berberich  said. 

“You  have  to  be  firm  in  your 
position  on  the  standard,”  he 
added.  “What  is  important  to 
us  is  that  we  focus  on  provid¬ 
ing  information.  To  the  extent 
we  have  a  tool  that  can  change 
data  into  information . . .  that 
is  very  useful.” 

Bill  Hostmann,  an  analyst  at 
Gartner  Inc.,  said  companies 
must  find  ways  to  reduce  costs 
when  building  an  infrastruc¬ 
ture  that  can  be  used  to  link 
historical  and  real-time  data. 

A  BI  infrastructure  for  ana¬ 
lyzing  real-time  data  is  much 
more  expensive  and  complex 
than  those  focused  only  on 
historical  data,  Hostmann 
said.  Eliminating  the  overlap 
or  redundant  features  found  in 
multiple  tools  can  help  offset 
those  costs,  he  said.  > 


think  a  lot  will  change.  The 
next  year  or  so  for  the  com¬ 
pany  is  all  about  operation  and 
focus  and  making  sure  people 
are  in  the  right  segment  and 
making  sure  all  the  technology 
in  the  products  is  transferred 
into  the  knowledge  base  of  the 
sales  force.  It’s  all  about  part¬ 
ner  organizations,  solutions 
and  all  of  that. 

Can  you  assess  the  competitive 
landscape,  including  Cisco?  We 

all  operate  in  the  shadow  of 
a  Cisco.  It  means  you  have  to 
differentiate  and  be  nimble. 
Cisco  may  be  large,  but  they 
have  lots  of  different  product 
lines  that  may  be  incompatible 
with  one  another.  We’ve  built 
our  company  around  a  single 
system  that’s  open.  We  have 
a  very  sophisticated  XML  in¬ 
terface  and  a  set  of  APIs  that 
make  it  very  easy  for  a  part¬ 
ner  like  Avaya  to  closely  build 
in  an  application  environ¬ 
ment.  That’s  key  when  you’re 
a  $400  million  company  like 
us.  The  trick  is  to  apply  what 
you  are  really  good  at  into 
markets  where  you  can  make 
a  difference,  and  get  there  be¬ 
fore  Cisco.  * 


New  CEO  Outlines  Plans  for  Struggling  Extreme 
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HATE  THAT. 


Bad  applications  are  bad  business.  Because  to  your 
customers,  applications  are  not  just  code.  Applications 
are  the  company.  And  if  it  isn’t  right,  the  whole  company 
gets  blamed. 

Now  more  than  ever  you  need  to  invest  in  automated 
software  quality  testing  and  management  solutions 
from  the  leader,  Mercury.  Mercury’s  software  optimizes 
applications  in  a  broad  range  of  environments.  Web- 
based  dashboards  give  I.T.  execs  and  global  project 
teams  visibility  into  status  and  progress  of  quality  efforts. 


Your  Quality  Assurance  team  can  even 
before  they’re  finished,  to  help  ensure 
schedules,  the  highest  levels  of 
development  costs. 

Delivering  high  quality,  h 
a  critical  way  to  optimize  the  bi 
And,  your  customers  will  love 
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peering  over  his  rimless  reading  glass¬ 
es  after  one  Yahoo  leak  and  telling  him: 
‘We  can’t  have  this,  so  you  go  out  and 
do  what  you  have  to  do.  Just  make  sure 
everything  is  legal  and  above  board.’  ” 

So  Hoak  wasn’t  just  any  former  col¬ 
league.  He  reportedly  was  Hurd’s  go-to 
guy  when  the  boss  wanted  internal 
leaks  investigated  at  NCR. 

Think  about  that.  Hurd  is  CEO  of 
a  company  that’s  embroiled  in  a  leak- 
probe  scandal  that  has  resulted  in  the 
criminal  indictments  of  its  former 
chairman,  Patricia  Dunn,  and  its  for¬ 
mer  chief  ethics  officer,  Kevin  Hun- 
saker.  Hurd  himself  has  been  called 
to  testify  before  Congress  about  his 
role  in  the  scandal,  which  is  still  under 
scrutiny  by  legal  authorities. 

Now,  not  only  has  Hurd  taken  over 
as  chairman,  but  he  has  also  appointed 
an  old  leak-investigation  cohort  to 
replace  Hunsaker.  No,  there’s  nothing 
inherently  wrong  or  unethical  about 
that.  And  there’s  absolutely  no  reason 
to  believe  Hoak  ever  conducted  any 
investigation  under  any  but  the  most 
ethical  of  circumstances. 

But  Hurd’s  appointment  of  Hoak 
still  smacks  of  cronyism  and  self- 
preservation.  And  that  just  creates  more 
damage  for  HP  to  have  to  control. » 


THERE’S  a  lot  of  buzz  about  Hewlett- 

Packard  being  in  damage-control  mode 
as  it  struggles  to  cope  with  the  fallout 
from  the  boardroom  leak  investigation 
fiasco.  While  the  buzz  is  getting  a  little 
tiresome,  it  begs  a  nagging  question  that  I  can’t  seem 
to  shake:  Why  is  HP  so  stupefyingly  bad  at  control¬ 
ling  the  damage? 


Here  we  have  a  company 
that’s  desperate  to  retain 
(or  regain)  its  users’  confi¬ 
dence  following  one  of  the 
highest-profile  corporate 
ethics  breaches  in  recent 
memory.  It  was  essential 
to  fill  the  newly  vacated 
chief  ethics  officer  post, 
and  quickly,  so  that  some¬ 
one  would  be  in  place  to 
ensure  that  HP  adheres  to 
its  standards  of  business 
conduct.  But  in  a  demon¬ 
stration  of  astonishingly 
poor  judgment,  the  post  was  filled  by 
one  of  HP  CEO  Mark  Hurd’s  old  cro¬ 
nies  from  NCR. 

It  has  been  almost  two  weeks  since 
HP  announced  that  Jon  Hoak,  a  former 
general  counsel  at  NCR  (the  company 
Hurd  left  to  join  HP  in  2005),  was  being 
tapped  for  the  chief  ethics  officer  post. 
Yet  HP’s  cluelessness  remains  a  mystery. 

Of  all  the  candidates  who  would  be 
eminently  qualified  to  assume  a  role 
that  would  clearly  require  objectivity, 
impartiality  and  a  degree  of  distance 
from  the  individuals  whose  names  are 
inextricably  linked  to  the  scandal,  why 
on  earth  select  Hoak? 

“Obviously,  Mark  wanted  to  make  a 
hire  quickly,”  HP  spokeswoman  Emma 
Wischhusen  told  Reuters,  according  to  a 
report  by  that  news  organization.  “The 
fact  that  they  had  worked  together  for 
more  than  10  years  greatly  shortened 
the  hiring  process.” 

Yes,  I’m  sure  it  did.  When  North 
Korea’s  Kim  II  Sung  appointed  his  son, 
Kim  Jong  II,  to  take  over  for  him,  that 
greatly  shortened  the  transfer-of-power 
process.  Expediency  has  its  merits,  but 
let’s  not  elevate  it  to  a  status  it  doesn’t 
deserve. 

It  seems  incomprehensible  that  no 


one  at  HP  could  foresee 
that  appointing  a  former 
Hurd  colleague  to  the 
ethics  oversight  position 
might  be  perceived  as  a 
shameless  attempt  by  Hurd 
to  keep  from  being  further 
sullied  by  the  scandal.  But 
there’s  another  dimension 
to  all  this  that’s  even  more 
baffling. 

Nearly  two  weeks  before 
HP  announced  Hoak’s  ap¬ 
pointment,  BusinessWeek 
ran  a  story  that  recounted 
how  Hurd  had  to  deal  with  a  number  of 
internal  investigations  at  NCR,  includ¬ 
ing  probes  of  leaks  of  sensitive  informa¬ 
tion  on  Yahoo  message  boards. 

“In  each  investigation,  Hurd . . .  relied 
on  his  former  chief  counsel,  Jon  Hoak, 
to  run  the  show,”  BusinessWeek  re¬ 
ported.  “Hoak . . .  vividly  recalls  Hurd’s 


THORNTON  A.  MAY 

Bean 

FDRofIT 

Leadership 

A  week  after  his  elec¬ 
tion  as  president  in 
1932,  Franklin  Delano 
Roosevelt  gave  an  interview 

to  The  New  York  Times.  In  it,  he  re¬ 
viewed  the  work  of  great  presidents 
and  concluded  that  they  were  all 
“leaders  of  thought  at  times  when 
certain  historic  ideas  in  the  life  of  the 
nation  had  to  be  clarified.”  Currently, 
executives’  and  society’s  ideas  about 
the  role,  purpose,  commitments 
and  responsibilities  of  IT  need  to  be 
clarified.  And  we  in  IT  must  be  the 
thought  leaders  who  step  up  and  pro¬ 
vide  the  necessary  clarity. 

Here  are  three  steps  to  prepare  you 
to  do  this. 


Step  1:  Celebrate  new  thoughts 
and  new  thinkers. 


We  w'ork  in  the  fastest-changing  sec¬ 
tor  of  the  economy, 
yet  many  IT  execu¬ 
tives  somehow  come 
across  to  peers  as 
stale,  tired,  intellec¬ 
tually  bankrupt  and 
operationally  out  of 
gas.  Ask  someone  in 
IT  “What’s  new?”  and 
he  most  likely  won’t 
have  a  very  exciting 
response.  How  can 
this  be? 

Another  U.S. 
president,  Grover 
Cleveland,  built  his 
political  base  by  hold¬ 
ing  forth  in  saloons,  speaking  clearly 
in  simple  words  to  immigrants.  He 
became  a  pipeline  to  the  knowledge 
that  they  wanted  and  an  aid  to  their 
Americanization.  Truth  be  told,  we 
are  all  immigrants  in  a  new  land 
—  the  land  of  digital.  We  in  IT  can  be 
a  pipeline  of  knowledge  and  ideas  to 
executives  coming  to  grips  with  the 
wholesale  digitization  going  on  in  the 
economy  today. 

But  if  most  ideas  come  into  your 
company  from  the  outside,  you  need  to 
do  more  creative  thinking  of  your  own. 
Be  selective  about  ideas,  but  don’t  be 
afraid  to  let  in  big  new  ones.  Remem- 
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ber  that  there  is  such  a  thing  as  new  IT 
knowledge.  Executives  are  searching  for 
a  road  map.  Let’s  give  it  to  them. 

Step  2:  Weed  out  old  thoughts 
ana  old  thinkers. 

A  difficult  but  necessary  step  on  the 
IT  professional’s  path  to  true  thought 
leadership  is  to  inventory  all  strongly 
held  beliefs  —  the  truths  about  IT  that 
are  held  to  be  self-evident  —  and  then 
assess  candidly  whether  they  are  in¬ 
deed  self-evident.  Woodrow  Wilson 
in  1912  wrote,  “We  are  in  the  presence 
of  a  new  organization  of  society. . . . 

The  old  formulas  do  not  fit  the  present 
problems;  they  read  like  documents 
taken  out  of  a  forgotten  age.”  We  need 
to  jettison  old  formulas  that  no  longer 
serve,  and  repurpose  or  remove  the 
people  who  cling  to  them. 

Every  vertical  market  needs  a  mental 
spring  cleaning  from  time  to  time.  I 
wrote  last  month  about  the  need  for 
IT  folks  in  health  care  to  get  out  and 
mingle  with  non-health-care  profes¬ 
sionals  (“Where  Are  All  the  Health 
Care  IT  Pros?”  Sept.  25).  Meanwhile,  in 
too  many  government  environments, 
public  servants  continue  to  perpetuate 
an  assembly-line  mode  of  operation  in 
a  build-to-suit  world. 

Step  3:  Have  a  compelling 
enapoint  and  work  toward  it. 

You  need  to  make  the  invisible  (that 
which  does  not  yet  exist)  visible.  Great 
organizations  are  bringing  those 
whose  impulse  is  toward  visionary 
change  and  those  who  are  interested  in 
making  things  work  into  close  contact 
with  one  another. 

Herbert  Hoover,  one  of  the  brightest 
and  best-intentioned  people  ever  to  go 
into  public  service,  was  described  by  a 
friend,  the  eminent  Kansas  journalist 
William  Allen  White,  as  “the  greatest 
innocent  bystander  in  history.”  Don’t 
be  a  Hoover.  Be  an  FDR!  ► 


JOHN  D.  HALAMKA 

In  the  Data 
Center,  the 
Heat  Is  On 

RECENTLY  BEGAN  a  project 
to  consolidate  two  data 
centers.  Moore’s  Law  has 
been  kind,  enabling  Harvard 

Medical  School  to  do  more  work  with 
less  data-center  real  estate.  We  had 


enough  rack  space,  network 
drops  and  power  connec¬ 
tions,  so  the  consolidation 
seemed  like  a  great  way  to 
reduce  operating  costs. 

All  looked  good  until  we 
examined  the  power  and 
cooling  requirements  of 
our  computing  clusters  and 
new  racks  of  blade  servers. 

For  a  mere  $400,000,  we 
could  run  new  power  wiring 
from  electrical  crypts  to  the 
data  center.  But  the  backup 
generators  wouldn’t  be  able 
to  sustain  the  consolidated 
data  center  in  a  total  power 
loss  situation,  so  we  would 
need  to  install  a  new  $1  mil¬ 
lion  backup  generator.  Prob¬ 
lem  solved? 

Not  quite.  The  heat  gener¬ 
ated  by  all  this  power  con¬ 
sumption  would  rapidly  exhaust  the 
cooling  system,  driving  temperatures 
up  10  degrees.  We  investigated  floor- 
tile-mounted  cooling,  portable  cooling 
units  and  even  rack-mounted  cooling 
systems.  They  all  take  up  space,  con¬ 
sume  power  and  add  weight.  In  the  end, 
we  found  that  the  new  data  center’s 
cost  per  square  foot  would  exceed 
the  cost  of  operating  two  less  densely 
packed  data  centers.  We  looked  at  com¬ 
mercial  data-hosting  options  and  ran 
into  the  same  issue.  Power  limits  per 
rack  meant  half-full  racks  and  twice  as 
much  square  footage  to  lease,  increas¬ 


ing  our  operating  costs. 

At  my  CareGroup  data 
center,  we  recently  complet¬ 
ed  a  long-term  planning  ex¬ 
ercise  for  our  unused  square 
footage.  Over  the  past  few 
years,  we’ve  met  increas¬ 
ing  customer  demand  by 
adding  servers,  and  power 
has  not  been  a  limiting  fac¬ 
tor.  However,  as  we  retire 
mainframe,  mini-  and  RISC 
computing  technologies  and 
replace  them  with  Intel-  or 
AMD-based  blades,  the  heat 
generated  will  exceed  our 
cooling  capacity  long  before 
real  estate  and  power  have 
been  exhausted. 

The  recent  rise  in  the 
cost  of  energy  has  also 
demonstrated  that  un¬ 
checked  growth  in  the 
number  of  servers  is  not  economically 
sustainable.  In  general,  IT  organiza¬ 
tions  have  a  tendency  to  add  capacity 
rather  than  take  on  the  more  difficult 
task  of  controlling  demand,  contribut¬ 
ing  to  growth  in  power  consumption. 

As  a  corollary  to  Moore’s  Law  and 
a  tribute  to  the  Hawaiian  god  of  fire,  I 
propose  Pele’s  Law.  Power  consump¬ 
tion  and  heat  will  increase  to  the  point 
where  data  centers  cannot  sustain  the 
number  of  servers  that  the  real  estate 
can  accommodate. 

The  solution  is  to  deploy  servers 
more  strategically.  We’ve  started  a 


“Kill-a-watt”  program  at  CareGroup  and 
are  now  balancing  our  efforts  between 
supply  and  demand.  We  are  more  con¬ 
servative  about  adding  dedicated  serv¬ 
ers  for  every  new  application  and  more 
likely  to  challenge  vendor  requirements 
when  dedicated  servers  are  requested, 
examine  the  efficiency  of  power  sup¬ 
plies  and  perform  energy-efficiency 
checks  on  the  mechanical  and  electri¬ 
cal  systems  supporting  the  data  center. 

We  have  also  begun  to  extensively 
use  VMware,  Xen  and  other  virtualiza¬ 
tion  techniques.  This  means  we  can 
host  farms  of  Intel  and  AMD  blades 
running  Windows  or  Linux,  deploying 
CPU  capacity  on  demand  without  add¬ 
ing  hardware.  We’re  connecting  two 
geographically  distant  data  centers 
using  low-cost  dark  fiber  and  building 
“clouds”  of  server  capacity.  We  create, 
move  and  load-balance  virtual  servers 
without  interrupting  applications. 

Managing  a  data  center  is  no  longer 
simply  a  facilities  or  real  estate  task. 
We’ve  hired  a  full-time  power  engineer 
to  manage  the  life  cycle  of  our  data 
center,  network  closets  and  disaster  re¬ 
covery  facilities.  New  blade  technolo¬ 
gies,  Linux  clusters  and  virtualization 
are  great  for  on-demand  computing, 
but  power  and  cooling  are  the  new  in¬ 
frastructure  challenge  of  the  CIO.  » 
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Stressing  the  Point 

IN  THE  article  “IT  Execs  Have 
to  Target  Stress,  CIO  Says" 
[News,  Aug.  21],  William  Cross 
was  quoted  as  saying,  "One  of  the 
big  reasons  [IT  is  a  stressful  oc¬ 
cupation]  is  we  work  very  closely 
with  computing  equipment  that  in 
today's  world  doesn't  fail.  That’s 
high-stress  because  if  there  are 
errors,  they  are  probably  ours.” 

It  is  apparent  that  Cross  hasn’t 
spent  much  time  actually  working 
with  technology,  or  hasn’t  had  an 
open  and  honest  discussion  with 
his  staff.  How  many  times  do  we 
work  with  software  or  hardware 
that  simply  fails  to  deliver?  How 
often  do  technicians  have  to  spend 
hours  applying  hot  fix  after  hot  fix 
to  fix  a  problem  that  the  vendor 
never  wanted  to  admit  existed? 
How  many  times  does  a  project  get 


dumped  on  a  technician  with  an 
unrealistic  time  frame  for  comple¬ 
tion  and  no  time  for  adequate 
testing?  The  answer  to  these  ques¬ 
tions  is  the  same:  very  frequently. 

I  have  worked  with  individuals 
like  Cross,  and  about  the  only  thing 
you  can  do  when  someone  doesn’t 
live  in  the  real  world  is  find  another 
position.  Hopefully,  your  new  boss 
won’t  have  his  head  in  the  sand. 
Alan  James 

Network  administrator, 
Houston 


YOUR  ARTICLE  totally  missed 
the  mark.  Stress  is  generated 
by  poor  leadership  and  the  side 
effects  it  creates  (i.e.,  measuring 
keystrokes  instead  of  results). 
Most  people,  if  managed  and  led 
properly,  are  energized  by  the 
problem-solving,  late-night  pages 


and  daily  challenges  of  being  in  IT. 
Having  a  bad  leader  with  no  vision, 
common  sense  or  communication 
skills  causes  stress. 

Bruce  MacDonald 

IT  architect,  Scottsdale,  Ariz. 


It  Shouldn’t  Be  IT 
Vs.  Everyone  Else 

I  COULDN’T  AGREE  more  with 
Bruce  A.  Stewart’s  article  “Think 
About  Messages  You  Send"  [Opin¬ 
ions,  Aug.  14],  As  an  IT  director  at  a 
national  company,  I  find  that  some¬ 
times  users  can  be  overwhelmed 
by  technical  data  that’s  useless  to 
them.  A  newsletter  is  a  good  way 
to  communicate  with  these  users, 
but  Stewart  is  right  that  you  have 
to  take  the  time  to  “de-IT-ize”  it. 

The  more  IT  can  relate  to  the 
people  it  supports,  the  more  it  will 


be  accepted  into  the  organization 
and  seen  as  part  of  the  team.  In 
some  organizations,  I  sense  an 
atmosphere  of  IT  vs.  the  rest  of  the 
group.  You  have  to  educate  people 
on  what  the  IT  department  is  doing 
and  talk  to  users  as  people. 

Darrin  P.  Brillhart 
Director  of  IT,  MMC  Corp., 
Overland  Park,  Kan., 
dbrillhart@mmccorps.com 

COMPUTERWQRLD  welcomes 
comments  from  its  readers.  Letters 
will  be  edited  for  brevity  and  clarity. 
They  should  be  addressed  to  Jamie 
Eckle,  letters  editor,  Computer- 
world,  P0  Box  9171, 1  Speen  Street, 
Framingham,  Mass.  01701.  Fax: 
(508)  879-4843.  E-mail:  letters® 
computerworld.com.  Include  an 
address  and  phone  number  for  im¬ 
mediate  verification. 
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_DAY  16:  These  servers  are  so  hot,  we’re  running  the  A.C. 
at  full  blast,  and  the  thermometer  is  still  pushing  140! 
Had  to  relax  the  dress  code  in  the  server  room.  No  choice. 
It’s  towels  and  flip-flops  until  we  get  this  heat  problem 
under  control. 

_Gil  says  he’s  lost  a  lot  of  weight.  I  hadn’t  noticed. 

_DAY  17:  I  found  a  cooler  answer  to  our  heat  problem: 
the  IBM  BladeCenter®  with  Intel®  Xeon®  Processors  reduces 
the  overall  amount  of  power  required  by  the  system.  The 
BladeCenter  is  designed  to  respond  automatically  to  power 
events  and  can  use  up  to  37%  less  energy!  Less  power. 
Less  heat.  Less  money.  Less  stress. 

_0h,  apparently  HR  had  a  problem  with  the  dress  code  but 
couldn’t  call  and  tell  us,  since  the  phones  had  melted. 
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SECURITY  MANAGER’S  JOURNAL 

Enterprise  DRM  Back  to  the  Fore 

Mathias  Thurman  had  lost  funding  for  his 
effort  to  protect  intellectual  property,  but  the 
CIO  now  puts  it  back  on  the  table.  PAGE  34 


OPINION 

The  E-voting  Blame  Game 

Robert  L.  Mitchell  says  electronic  voting  tech¬ 
nology  has  turned  into  a  convenient  scapegoat 
for  all  that  goes  wrong  at  the  polls.  PAGE  38 
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Howard  Dresner,  who  coined  the  term 
“business  intelligence”  in  1989,  evaluates  17 
years  of  BI  and  looks  at  its  future.  PAGE  36 


BY  ROBERT  L.  MITCHELL 


T  PERKINELMER  INC.,  server  virtualiza¬ 
tion  is  a  new  data  center  standard.  In 
less  than  two  years,  the  life  sciences 
company  has  gone  from  experiment¬ 
ing  with  VMware  ESX  Server  on  a  few 
machines  in  its  development  group  to 
deploying  230  virtual  server  instances 
in  its  Boston  data  center.  “Our  journey 
i  has  been  a  pretty  smooth  one,”  says  CIO 
iMatt  Dattilo.  But  even  as  the  Wellesley, 
Mass.-based  company  prepares  to  deploy  the  technol¬ 
ogy  in  its  five  largest  data  centers,  most  of  Dattilo’s 
peers  are  still  kicking  the  tires. 

In  Computer-world’s  latest  quarterly  Vital  Signs 
survey,  51%  of  the  314  IT  managers  polled  said  they 

have  no  plans  to  use 
server  virtualization. 
Fewer  than  one  in  five 
said  they’re  testing  the  technology,  and  just  one  quar¬ 
ter  use  it  for  production  servers.  A  mere  4%  said  they 
have  followed  PerkinElmer’s  example  and  made  vir¬ 
tual  machines  a  default  server  technology  standard 
for  many  data  center  applications.  “Most  companies 
are  still  working  with  it  in  smaller  areas,  consolidat¬ 
ing  a  few  servers,”  says  Gartner  Inc.  analyst  Martin 
Reynolds. 

The  technology  is  maturing  rapidly,  but  most  orga¬ 
nizations  are  just  starting  to  climb  the  adoption  curve. 
IT  executives  recite  a  litany  of  reasons  why  they’re 
hesitant  to  move  forward.  Ob¬ 
stacles  include  the  need  to  train 
administrators,  cost,  the  lack  of 
vendor  competition,  and  concerns 
about  the  availability  and  qual¬ 
ity  of  management  tools.  They 
also  worry  that  software  vendors 
won’t  support  applications  run¬ 
ning  on  virtual  machines. 

The  survey  shows  that  the  rea¬ 
sons  for  considering  virtualiza¬ 
tion  differ  depending  on  the  size 
of  the  organization.  While  more 
than  half  of  large  companies  cite 
consolidation  as  their  primary 
reason  for  adopting  server  virtualization,  companies 
with  fewer  than  500  employees  are  most  interested 
in  ease  of  deployment  and  manageability.  And  some 
smaller  companies  are  looking  at  virtualization  to 
solve  business  continuity  challenges. 

Rod  Payton,  IT  director  at  Bethesda,  Md.-based 
Case  Design/Remodeling  Inc.,  says  disaster  recovery 
makes  the  business  case  for  virtualization.  He  has 
been  testing  Microsoft  Corp.’s  Virtual  Server  and 
VMware  Inc.’s  VMware  ESX  Server,  and  he  plans  to 
roll  out  ESX  Server  later  this  fall.  “Cost  savings  isn’t 
our  primary  motivation,”  Payton  says.  With  the  abil- 

Continued  on  page  30 
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Innovations  by  InterSystems 


Teach  old  applications  new  tricks. 

Chances  are  you  have  users  who  want  your  applications  to  do  new  and  wondrous  things. 

So  you’ve  probably  tried  rewriting  them,  and  know  how  difficult  that  can  be. 

We  have  an  easy  way  to  enhance  applications  without  rewriting  -  adding  functionality  and  new 
user  interfaces,  and  giving  your  applications  the  capability  to  work  together  as  an  ensemble. 

These  impressive  tricks  are  performed  easily  with  Ensemble  -  a  software  innovation 
by  InterSystems  that  enables  you  to  extend  your  applications  with  a  browser-based  user  interface, 
adaptable  workflow,  rules- based  business  processes,  executive  dashboards,  and  more.  In  addition, 
Ensemble  gives  you  the  ability  to  rapidly  connect  people  and  processes. 

We  are  InterSystems,  a  global  software  company  with  a  28-year  track  record  of  innovations 
that  enrich  applications. 

InterSystems 

ENSEMBLE 

Read  case  studies  about  this  exciting  innovation  at  www.InterSystems.com/Enrich5A 
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It’s  what’s  next  for  color  in 
the  workplace. 

Introducing  the  Canon  Color  imageRUNNER  Series  with  groundbreaking 
imageCHIP  technology. 

Innovators  never  stop.  They  never  leave  well  enough  alone.  That  s  why  we  took 
industry-leading  Canon  Color  imageRUNNER  '  Series,  and  vastly  improved  it  with 
^  our  exclusive  imageCHIP  system  architecture.  Our  new  imageCHIP  technology 
'  not  only  enables  you  to  print,  scan  and  fax  simultaneously  without  bottlenecks  in 
productivity,  but  it  will  change  the  way  you  think  about  using  color  in  the  office.  With  more  speed 
and  power  for  greater  performance,  the  Canon  Color  imageRUNNER  Series  will  deliver  the  future 
of  color  in  the  workplace  today.  And  all  with  the  color  quality  you  ve  come  to  expect  from 
The  new  Canon  Color  imageRUNNER  Series.  It’s  what’s  next  for  color. 
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ity  to  move  virtual  machines,  “we  can  fail  over  in  real 
time  or  in  a  very  short  time,”  he  says.  “We’ll  be  able 
to  implement  disaster  recovery  that  we  don’t  even 
have  today.”  But  he’s  also  cautious  and  plans  to  roll 
out  virtualization  gradually  over  six  months.  “I’m  not 
going  to  put  myself  in  a  corner  based  on  something  a 
vendor  says.  I  want  to  see  it  work,”  Payton  explains. 

VMware  is  the  dominant  vendor,  with  55%  of  the 
virtual  machine  market,  according  to  IDC.  Microsoft 
currently  offers  Virtual  Server  2005,  which  runs  on  top 
of  Windows,  but  it  plans  to  incorporate  a  more  power¬ 
ful  “hypervisor”  virtualization  layer  in  the  upcoming 
Longhorn  release  of  Windows  Server.  That  version, 
which  won’t  require  a  host  operating  system,  will  more 
directly  compete  with  VMware’s  ESX  Server. 

In  the  Linux  realm,  the  Xen  hypervisor  within  the 
popular  Linux  distributions  from  Red  Hat  Inc.  and 
SUSE  Linux  AG  will  soon  provide  another  alternative. 
Anticipation  of  those  changes  may  also  be  keeping 
some  people  on  the  sidelines. 

“There’s  confusion  over  where  things  are  going,” 
says  Reynolds.  “Do  I  invest  in  VMware  now,  whereas 
if  I  wait  another  18  months,  I  can  have  Microsoft  vir¬ 
tualization  that  could  be  a  whole  lot  less  expensive 
and  work  with  my  Windows  servers  better?” 

Fear  Factor 

Shahri  Moin,  IT  director  at  Oscient  Pharmaceuticals 
Corp.  in  Waltham,  Mass.,  is  testing  Microsoft  Virtual 
Server  2005.  So  far,  so  good,  he  says,  but  Moin  has 
reservations  about  upsetting  the  status  quo.  “Put¬ 
ting  it  in  production  scares  the  daylights  out  of  me,” 
he  acknowledges.  And  since  he  has  just  a  few  dozen 
servers  to  manage,  the  most  common  motivation  for 
adopting  virtualization  —  consolidation  —  isn’t  a  big 
concern.  “It’s  not  going  to  allow  me  in  a  meaningful 
way  to  reduce  staff  or  operating  costs,”  Moin  says. 

PerkinElmer  first  started  using  virtual  machines 
in  2005  in  a  project  designed  to  address  space,  power 
and  cooling  problems  in  its  Boston  data  center  by 
consolidating  physical  servers.  Jeff  Brittain,  IT  direc¬ 
tor  for  the  city  of  Hickory,  N.C.,  found  another  way 
to  achieve  a  similar  goal.  He  tested  Microsoft  Virtual 
Server  2005  but  decided  to  migrate  40  rack-mounted 
servers  to  IBM  blade  servers  instead.  “That  is  accom¬ 
plishing  the  consolidation  we  were  looking  at,”  he 
says.  With  no  pressing  reason  to  go  ahead  with  Vir¬ 


tual  Server,  he  says  he’ll  revisit  the  technology  “down 
the  road.” 

John  Nordin,  CIO  at  Insurance  Auto  Auctions  Inc. 
in  Westchester,  Ill.,  has  been  testing  VMware,  but  he 
says  he  doesn’t  trust  the  technology  enough  to  use 
it  on  the  130  servers  that  run  the  company’s  auction 
business.  During  an  auction,  a  car  is  sold  every  40 
seconds,  and  many  bids  come  in  electronically.  With 
750,000  auctions  a  year,  Nordin  says  he  can’t  afford 
problems.  “This  is  super-mission-critical  stuff.  When 
it  isn’t  there,  we  can  see  it  on  the  bottom  line,”  he  says. 

In  early  testing  of  VMware,  a  virtual  server  inex¬ 
plicably  reverted  back  to  a  prior  configuration.  That 
corrupted  the  system,  which  had  to  be  restored  from 
tape.  Nordin  says  explanations  from  his  vendors, 
VMware  and  Microsoft,  haven’t  been  forthcoming.  “I 
got  a  lot  of  the  classic  multivendor  finger-pointing,” 
he  says.  “Nobody  has  been  able  to  give  me  a  root 
cause,  and  this  thing  is  never  seeing  production  until 


I  know  why  this  happened.”  Even  if  those  answers 
come,  Nordin  says,  he’ll  start  out  slowly  by  using  the 
technology  only  on  his  print  servers. 

Bob  Holstein,  CIO  at  National  Public  Radio  Inc., 
isn’t  worried  about  the  reliability  of  VMware  ESX 
Server,  which  he  calls  “rock-solid  and  production¬ 
worthy.”  He’s  testing  the  product  now  and  plans  to 
do  a  small  rollout  on  production  servers  later  this 
year.  If  all  goes  according  to  plan,  application  servers 
with  low  utilization  rates  will  be  consolidated  and 
then  moved  to  a  collocation  facility  to  make  room 
for  more  servers  that  handle  live  digital  audio  feeds 
for  NPR’s  radio  programs.  Those  servers  will  stay 
on  physical  hardware,  however.  “Those  [application] 
vendors  are  not  going  to  support  a  virtual  environ¬ 
ment,  and  they’re  too  mission-critical  to  take  that 
risk,”  Holstein  says. 

“I  have  a  ‘show  me’  attitude  about  [VMware]  right 

Continued  on  page  32 
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■  VIRTUAL  SERVER  2005 

Unlike  VMware’s  ESX  Server,  which  runs  directly  on  the  system 
haidware,  Microsoft  Virtual  Server  2005  R2  runs  virtual  machines,  or 
guest  operating  systems,  on  top  of  another  instance  of  Windows.  Ar¬ 
chitecturally,  Virtual  Server  is  similar  to  VMware  Server  (formerly  6SX 
ver).  Both  products  are  free.  Virtual  Server  2005  R2  SP2,  which 
,  currently  in  beta,  supports  hardware-assisted  virtualization  in  the 
..  osi  processors  from  Advanced  Micro  Devices  Inc.  and  Intel  Corp. 
Vnv  ne  Shadow  Copy  Service  has  been  enhanced  so  that  a  physical 
server  and  all  apps  on  it  can  be  captured  in  a  single  snapshot,  rather 
than  requiring  individual  backups  of  each  guest  operating  system. 

a  WINDOWS  SERVER  LONGHORN 

The  riypervisor”  software  in  the  Longhorn  release  of  Windows 
Se  ver  will  directly  compete  with  ESX  Server.  Longhorn  will  ship 
sometime  in  2007.  and  tne  virtualization  capabilities  will  roll  out 
about  six  months  later.  Jim  Ni,  Microsoft’s  group  manager  for  server 


While  VMware  holds  the  lion’s  share 
of  the  server  virtualization  market,  several  competing 
products  are  available  -  or  are  in  the  works. 

Here’s  how  a  few  of  the  key  players  stack  up, 


virtualization,  describes  the  hypervisor  as  a  stripped-down  version 
of  Windows.  Longhorn  will  support  both  Windows  and  Xen-enabled 
versions  of  Linux  as  virtual  servers.  While  users  still  have  to  pay  a 
Windows  Server  license  for  the  hypervisor,  Enterprise  Edition  users 
will  be  able  to  run  guest  instance  of  Windows  in  up  to  four  virtual 
machine  sessions  without  additional  licensing  fees. 

■  VMWARE 

VMware,  a  unit  of  EMC  Corp.,  offers  both  Virtual  Server  and  ESX 
Server,  part  of  its  VMware  Infrastructure  suite.  VMware  has  the 


most  advanced  tools.  The  recently  released  Version  3  added  the 
Consolidated  Backup  and  Distributed  Resource  Scheduler  tools  for 
dynamic  load  balancing  across  virtual  machines.  Another  new  tool, 
VMware  HA,  automatically  restarts  virtual  machines  running  on  one 
physical  server  on  a  backup  server  in  the  event  of  hardware  failure. 

■  XEN 

Both  Novell  Inc.  and  Red  Hat  are  including  the  open-source  Xen 
hypervisor  into  their  Linux  distributions.  XenSource  Inc.  has  released 
Xen  Enterprise,  which  supports  virtual  machines  running  many  Unix 
and  Linux  distributions.  It  will  also  support  Windows  virtual  machines 
by  year’s  end,  says  Simon  Crosby,  chief  technology  officer  at  Xen¬ 
Source.  Xen  Enterprise  can  run  on  a  32-way  machine,  while  VMware 
can  only  scale  up  to  a  four-processor  machine.  “We’re  a  little  lacking 
in  terms  of  spit  and  polish,"  Crosby  acknowledges.  But,  he  adds, 
“we’re  about  one-tenth  the  cost.” 

-  ROBERT  L.  MITCHELL 
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2.4  GHz  secure,  wireless  technology.  And  with  the  SoundStation2W  you  can  speak  from  up  to  10-feet  away  and  still  be  heard  clearly  on  the  other  end, 
ensuring  that  you  can  communicate  your  ideas  clearly  and  with  impact.  The  SoundStation2W  -  designed  to  be  used  wherever  you  need  to  do  business. 

Now  isn't  that  refreshing? 

To  learn  more  about  Polycom's  wireless  voice  conferencing  solution  and  about  Polycom's  full  line  of  conference  phones,  visit  www.polycom.com/voice/2wcw. 
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now,”  Holstein  says,  adding  that  staffers  need  to  get 
plenty  of  hands-on  experience  with  the  technology 
before  moving  to  a  production  environment. 

Nordin  agrees.  “People  who  haven’t  worked  in  any 
partitioned  environment  shouldn’t  underestimate 
what  their  system  engineers  need  to  learn,”  he  says. 
“Make  sure  you  put  the  training  dollars  in.” 

“Virtualization  is  kind  of  a  leap  of  faith,”  says  Mike 
French,  senior  network  engineer  at  PerkinElmer.  He 
has  spent  time  explaining  the  technology  to  his  peers. 
“It’s  a  tough  thing  to  break  the  barrier,  but  if  you  build 
the  environment  rock-solid  with  redundancy  and 
safeguards,  nobody  should  ever  have  a  problem.” 

Although  the  technology  has  been  in  use  for  several 
years,  it’s  still  common  to  find  applications  that  aren’t 
supported  on  virtual  machines.  “A  lot  of  vendors  won’t 
certify  applications  as  VMware-compatible,”  Dattilo 
says.  “In  most  cases,  we  assumed  the  risk,  unless  it 
was  a  mission-critical  application.” 

A  VMware  spokesman  says  that  the 
problem  has  diminished.  Indeed,  a  few 
of  Dattilo’s  vendors,  such  as  Hyperion 
Solutions  Corp.  and  Business  Objects  SA, 
have  begun  supporting  virtual  machines 
since  he  started  working  with  the  tech¬ 
nology.  As  for  the  others,  Dattilo  says  that 
most  software  vendors’  support  organi¬ 
zations  will  still  work  with  his  staff  on 
problems,  but  he  hasn’t  had  any  so  far. 

Nordin  says  the  fact  that  some  soft¬ 
ware  vendors  still  don’t  support  applica¬ 
tions  on  virtual  servers  is  evidence  that 
the  market  still  isn’t  fully  mature. 

“Those  types  of  issues  have  been 
long  resolved  in  the  MVS,  VM  and 
Unix  space,”  he  says,  adding  that  server 
virtualization  products  “need  to  get  go¬ 
ing.”  With  Red  Hat,  SUSE  and  Microsoft 
embedding  hypervisors  into  the  Linux 
and  Windows  operating  systems,  how¬ 
ever,  application  vendors  will  have  little 
choice  but  to  support  it,  analysts  say. 

Software  vendors  aren’t  the  only  ones 
who’ve  been  slow  to  support  their  prod¬ 
ucts  running  in  virtual  servers.  Jon  El- 
sasser,  CIO  at  The  Timken  Co.  in  Canton,  Ohio,  says 
IT  staff  resistance  to  deploying  homegrown  applica¬ 
tions  on  virtual  machines  has  stopped  some  projects. 
“Some  internal  application-support  personnel  are  a  bit 
leery  of  it,”  Elsasser  says,  but  he  expects  attitudes  to 
change  over  time. 

Slow  Uptake 

Even  companies  that  have  embraced  virtual  server 
technology  have  limited  its  penetration  into  the  data 
center.  Those  that  have  adopted  virtualization  have, 
on  average,  only  about  20%  of  their  environment  vir¬ 
tualized,  according  to  IDC  analyst  John  Humphreys. 

After  a  pilot  last  year,  Timken  went  on  to  virtual¬ 
ize  35%  of  its  servers.  It  now  has  125  virtual  servers 
running  on  six  quad-processor  physical  machines, 
but  Elsasser  has  no  plans  to  expand  beyond  that.  The 
100  Windows  and  SQL  servers  supporting  a  new  SAP 
ERP  software  implementation  are  off-limits  to  virtu¬ 
alization,  he  says.  “At  this  point,  we’re  just  glad  it’s 
running,”  Elsasser  says. 


At  PerkinElmer,  Dattilo’s  goal  is  to  have  52%  of 
servers  virtualized  by  the  time  the  current  project 
there  is  completed.  That  includes  application  servers 
with  relatively  low  utilization  levels,  but  others,  such 
as  Exchange  Server  mailbox  nodes,  are  staying  put. 

Payton  plans  to  roll  out  virtualization  at  Case 
Design/Remodeling  this  fall.  “We’ll  stay  away  from 
Exchange  and  SQL  Server”  and  focus  on  low-utiliza¬ 
tion  applications  like  domain  controllers  and  file-  and 
print-sharing  servers,  he  says.  Most  users  aren’t  ready 
to  consider  virtualization  for  important  applications, 
says  IDC  analyst  Steven  Elliot.  “The  really  mission- 
critical  stuff  is  further  down  the  line,”  he  says. 

Tools  for  managing  virtual  machines  are  still  evolv¬ 
ing,  and  their  availability  is  “still  a  little  light,”  says 
Dattilo.  However,  he  adds  that  tools  included  with 
the  recently  introduced  VMware  Infrastructure  3 
Enterprise  Edition  have  solved  some  of  his  problems. 
Currently,  every  virtual  machine  on  a  physical  server 
needs  its  own  instance  of  Backup  Exec. 
VMware  Consolidated  Backup  eliminates 
that  problem. 

Distributing  loads  across  virtual  ma¬ 
chines  —  a  time-consuming,  manual 
process  today  —  can  be  automated  using 
Distributed  Resource  Scheduler.  Payton 
has  been  testing  with  the  previous  ver¬ 
sion  of  VMware  and  says,  “We’re  running 
into  CPU  utilization  problems  because 
the  limit  is  set  statically.”  He  and  Dattilo 
both  plan  to  migrate  to  the  new  version. 

With  VMware  so  far  ahead  of  the 
competition,  there’s  little  pressure  on 
pricing  today.  “Software  licensing  costs 
are  a  little  high,  and  their  maintenance 
is  out  of  this  world,”  says  Dattilo.  Ap¬ 
plication  software  licensing  on  virtual 
machines  is  also  in  flux.  “There’s  a  lot  of 
confusion  among  application  vendors  as 
to  how  those  will  be  licensed,”  he  says, 
noting  he  doesn’t  want  to  pay  a  per-proc- 
essor  premium  for  running  on  a  quad- 
processor  machine  when  an  application 
is  running  in  a  virtual  machine  and  us¬ 
ing  just  a  fraction  of  those  resources. 
Analysts  expect  the  adoption  curve  to 
accelerate  this  year  as  users  become  more  comfort¬ 
able  with  virtualization  technology.  Says  Elliot,  “2006 
is  the  year  of  production  for  large  enterprises.” 

But  that  doesn’t  mean  everyone  should  rush  ahead. 
“If  you  don’t  have  a  clear  benefit  from  virtualization 
today,  you  can  wait,”  says  Reynolds.  That  said,  most 
companies  will  find  at  least  some  immediate  benefits, 
whether  from  consolidation  or  reduced  server  con¬ 
figuration  and  deployment  costs.  Elsasser  says  server 
procurement  time  savings  made  his  project  worth¬ 
while.  “It  used  to  take  two  weeks  to  deploy  a  new 
server,”  he  says.  “Now  we  can  do  it  in  two  days,  and 
in  an  emergency,  we  can  do  it  in  an  hour.” 

A  compromise  strategy  is  to  focus  on  “high-value 
production  deployments”  but  put  off  broader  imple¬ 
mentations,  says  Reynolds.  The  next  version  of  Win¬ 
dows  Server  will  offer  technology  to  compete  with 
VMware  in  18  months  or  so,  and  Linux  distributions 
with  virtualization  technology  will  be  here  even  soon¬ 
er.  With  those  competitive  pressures,  “VMware  could 
become  significantly  less  expensive,”  Reynolds  says.  * 


What  do  you  consider 
the  barriers  to 
adoption  of  virtualization 
technology? 
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Lack  of  necessary  skills 

fEU 

in  the  organization 

2 

Not  convinced 

IS 

there  are  benefits 
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Creates  a  single  point  1 

I 

of  failure  for  multiple 

1 

virtual  servers 

m 

Cost 

Application  software 
not  supported  on 
virtual  machines 


Software  licensing 


.Base:  161  IT  managers  who  don’t 
use  server  virtualization 

SOURCE:  COMPUTERWORLD  VITAL 
SIGNS  ONLINE  SURVEY,  AUGUST  2.006 


In  Computerworld's  second  quarterly  Vital  Signs  survey,  disaster 
recovery  and  security  were  the  two  leading  short-term  priorities 
among  the  314  IT  managers  surveyed.  And  many  respondents 
said  they  were  moving  forward  with  business  intelligence  and 
Web  services  projects.  They  also  said  they’re  concerned  about 
budget  constraints  and  managing  multiple  projects. 

O  Comprehensive  Checkup:  For  more  results  of  our  Vital  Signs  survey 
and  respondents’  demographics,  visit  www.computerworld.com 


What  will  be  your  company’s  top  three 
IT  project  priorities  in  the  next  three  months? 

Disaster  recovery/continuity  planning  |~ 

Data  security/privacy  | 

Data  management/business  analytics  | 

Web  services  | 

Servers  \ 

Top  five  responses;  multiple  responses  allowed. 

What  changes  do  you  expect  in  your  IT  spending 
in  the  next  12  months? 


Decrease:  8% 


What  will  be  your  biggest  management  challenge 
in  the  next  three  months? 

Budget  constraints  | 

Managing  projects  | 

Regulatory  compliance  | 

Data  security/privacy  9% 

Managing/developing  personnel 

Top  five  responses;  multiple  responses  allowed. 


What  changes  do  you  expect  in  your  IT  head  count 
in  the  next  three  months? 


Decrease:  7% 
Percentages  don't  add  up  to  100  because  of  rounding. 

SOURCE:  COMPUTERWORLD  VITAL  SIGNS  ONLINE  SURVEY.  AUGUST  2006 
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The  AMD  Opteron™ 
processor  provides 
industry-leading 
performance. 


Opteron 


ON  CAPACITY.  NOT  COMPLEXITY 


INTRODUCING  THE  NEW  DELL”  POWEREDGE”  6950  SERVER. 


Meet  the  new  4-socket  Dell'”  PowerEdge™  6950  server.  It’s  ideal 


for  your  big  business,  since  it’s  primed  to  handle  all  your 


mission-critical  database  and  virtualization  apps.  All 


the  benefits  of  the  PowerEdge  family  keep  your 


datacenter  running  on  all  cylinders,  so  you’re 


Purely  You 

See  the  Dell  difference  at 
www.dell.com/server/cw 
1.866.218.7715 


MI 


always  in  command  of  even  the  most 
demanding  enterprise.  Business 
solutions  designed  with  one 
company  in  mind. 

Yours. 
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Enterprise  DRM 
Back  to  the  Fore 


Our  security  manager  had  lost  funding  for 
his  effort  to  protect  IP,  but  the  CIO  puts  it 
back  on  the  table.  By  Mathias  Thurman 


The  cio  called  me 

into  his  office  recent¬ 
ly  to  show  me  some¬ 
thing.  I’ve  learned 
that  when  he  wants  to  show 
me  something,  I  should  be 
prepared  to  spend  some  long 
nights  at  work.  That’s  what 
happened  this  time  as  well. 

What  he  wanted  to  show  me 
was  related  to  digital  rights 
management.  I  have  men¬ 
tioned  before  that  I 
have  tried  to  deploy 
enterprise  rights 
management  to  pro¬ 
tect  our  company’s 
intellectual  property. 

With  DRM,  one  can 
encrypt  a  docu¬ 
ment  and  then  “wrap”  it  in  a 
digital  envelope  that  applies 
certain  permissions  or  policies 
to  it.  Permissions  can  be  as 
simple  as  a  list  of  authorized 
recipients,  and  policies  can  do 
things  like  restrict  the  recipi¬ 
ents’  ability  to  copy  and  paste, 
save,  print  or  send. 

My  initial  attempt  at  de¬ 
ploying  DRM  was  not  very 
successful.  As  the  project 
manager,  I  had  defined  most 
of  the  requirements,  re¬ 
searched  vendors  and  selected 
a  single  vendor  to  conduct  a 
pilot.  I  had  even  gone  so  far  as 
to  have  a  Solaris  server  con¬ 
figured,  and  all  that  was  left 
to  do  was  to  obtain  the  rights 
management  server  software. 
But  then  funding  for  the  proj¬ 
ect  was  “deferred.”  That  was 
just  a  nice  way  of  telling  me  it 
had  been  cut. 

I  still  haven’t  seen  any  fund¬ 
ing.  When  I  was  hired  here,  I 
was  told  that  protecting  intel¬ 
lectual  property  was  a  priority, 
so  you  would  expect  execu¬ 
tives  to  be  excited  about  de¬ 
ploying  DRM.  It’s  quite  funny, 


actually,  when  I  think  about 
the  countless  hours  I’ve  spent 
researching  and  conducting 
project  management  meet¬ 
ings  for  various  initiatives  that 
have  never  received  funding. 

I  don’t  mind  doing  the  work; 

I  always  learn  something, 
since  most  initiatives  involve 
either  new  and  emerging 
technologies  or  something  I’ve 
deployed  in  the  past  but  need  a 
refresher  on. 

As  the  manager, 
though,  I  have  to  be 
careful  not  to  get 
too  involved  in  proj¬ 
ects,  since  I  have  a 
department  to  run 
and  don’t  have  time 
for  things  like  configuring 
servers.  That  was  thrown  to 
the  side,  however,  when  the 
CIO  called  me  in. 

He  had  spent  the  previous 
evening  playing  around  with 
the  Microsoft  Windows  Rights 
Management  Services  (RMS) 
client  and  demonstrated  it  to 
me  using  his  Microsoft  Pass¬ 
port.  Passport,  now  called  Live 
ID,  was  designed  as  a  universal 
log-in  service.  It’s  supposed  to 
let  users  log  into  many  Web 
sites  using  one  account,  though 
it  has  never  really  caught  on. 
But  RMS  can  use  Live  ID  as 
a  valid  credential  to  encrypt 
and  verify  a  user’s  association 
with  a  document  or  some  other 
electronic  content.  My  CIO 
was  so  excited,  he  wanted  to 
set  up  a  demonstration  for  a 
group  of  executives  on  the  In- 


I  agreed 
to  a  proof- 
of-concept  de¬ 
ployment. 


tellectual  Property  Protection 
Steering  Committee.  His  idea 
is  that  if  he  can  convince  them 
that  RMS  is  a  worthwhile 
technology,  they  will  fund  an 
initiative  to  revisit  DRM. 

RMS  is  an  appealing  meth¬ 
od  for  DRM,  since  the  client 
and  server  software  are  freely 
available  and  most  Microsoft 
Office  applications  are  already 
RMS-enabled.  There  is  a  per- 
seat  cost  once  deployed,  but 
there  is  no  initial  cost  for  the 
software. 

Passport  Problems 

I  agreed  to  a  proof-of-concept 
deployment  of  RMS,  but  we 
won’t  be  using  Live  ID  creden¬ 
tials.  Live  ID  requires  users  to 
create  the  identification,  which 
could  cause  some  problems. 

I  created  a  Passport  ID  many 
years  ago,  using  my  Yahoo 
e-mail  address  for  validation. 
Unfortunately,  I  wasn’t  able 
to  use  the  same  ID  within  my 
company,  since  I  couldn’t  bind 
my  corporate  e-mail  address  to 
my  existing  Passport  ID. 

So  instead,  we’ve  installed 
the  Microsoft  Rights  Manage¬ 
ment  Server.  The  idea  is  that 
the  RMS  client  will  talk  to 
Active  Directory  to  obtain  the 
location  of  the  RMS  server. 
(You  have  to  configure  what  is 
called  a  “service  connection 
point”  within  your  corporate 
Active  Directory  infrastruc¬ 
ture.)  Once  the  client  makes 
the  connection  to  the  server,  it 
obtains  the  policies  that  apply. 

This  has  turned  out  to  be 
a  clean  and  easily  controlled 
method  for  deploying  RMS. 
The  installation  of  the  server 
software  took  all  of  10  minutes. 
For  our  proof-of-concept  dem¬ 
onstration,  we  created  two 
policies.  The  first  we  called 
the  Intellectual  Property  Pro¬ 
tection  Steering  Committee 
Only,  or  IPPSC-Only,  policy. 

A  document  or  e-mail  with 
that  policy  applied  can  be 
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opened  by  only  the  half-dozen 
members  of  the  group  with 
read-only  privileges.  With 
this  policy,  we’re  demonstrat¬ 
ing  that  we  can  allow  a  small 
group  of  people  to  share  docu¬ 
ments  among  themselves.  If 
you’re  not  a  member  of  the 
group,  you  won’t  be  able  to 
open  the  document  or  e-mail, 
even  if  you’re  an  employee  of 
the  company. 

The  other  policy,  which  we 
called  Internal  Use  Only,  al¬ 
lows  anyone  in  the  company 
with  a  domain  account  to  open 
a  document  or  e-mail.  There 
are  no  other  restrictions,  so 
as  long  as  you’re  an  employee, 
you  should  have  full  control 
over  any  document  or  e-mail 
that  has  this  policy  attached. 

I  had  our  Windows  expert 
create  an  install  package  so 
that  the  client  could  be  in¬ 
stalled  with  minimal  effort 
by  the  end  user.  Remember, 
the  audience  for  this  test  is  a 
bunch  of  executives.  If  they 
have  to  click  though  a  lot  of  in¬ 
stall  screens,  they’ll  claim  that 
the  software  isn’t  user-friendly. 

The  presentation  to  the 
steering  committee  went 
well,  but  naturally  there  were 
a  number  of  questions,  all 
beginning  with  “suppose.” 

For  example,  “Suppose  that 
I  needed  to  view  a  protected 
document  at  a  customer  site,” 
or,  “Suppose  I  wanted  to  send 
a  protected  document  to 
someone  who  wasn’t  an  em¬ 
ployee.”  I  have  a  list  of  about 
15  such  questions  that  I  will 
have  to  research  and  answer. 
But  the  goal  of  this  proof  of 
concept  was  to  introduce  a 
group  of  executives  to  a  tech¬ 
nology  that,  if  deployed  prop¬ 
erly,  could  prevent  the  theft  of 
intellectual  property  and  save 
the  company  money.  I  believe 
I  accomplished  that  goal.  For 
now,  I’ll  just  sit  back  and  wait 
for  the  checkbook  to  open.  * 


WHAT  DO  YOU  THINK? 

This  week's  journal  is  written  by  a  real 
security  manager,  “Mathias  Thurman," 
whose  name  and  employer  have  been 
disguised  for  obvious  reasons.  Contact 
him  at  mathias.thurman@yahoo.com,  or 
join  the  discussions  in  our  security  blogs: 
computerworld.com/blogs/security 

To  find  a  complete  archive  of  our  Security 
Manager’s  Journals,  go  online  to 

computerworld.com/secjournal 


Security  Bookshelf 

Self-Defending  Networks: 
The  Next  Generation  of 
Network  Security,  by 
Duane  De  Capite  (Cisco 
Press,  2006). 

The  concept  of 
seif-defending 
networks  has 
always  intrigued 
me,  and  it’s  prob¬ 
ably  the  goal  of 
every  security 
professional.  This 
book  provides  a  road 
map  to  building  an  effec¬ 
tive  self-defending  network 
-  though  only  one  using 
Cisco  Systems  Inc.  security 
appliances.  The  author  pro¬ 
vides  some  basic  definitions 
and  explanations  of  some  of 
the  core  elements  needed, 
such  as  802.1x  and  Network 
Admissions  Control.  Any  big 
Cisco  user  who’s  interested 
in  learning  that  company’s 
approach  to  the  self-defend¬ 
ing  network  will  want  to 
pick  up  a  copy  of  this  book. 

-MATHIAS  THURMAN 

Researchers  Detail 
Encryption  for  Net 

Princeton  University  re¬ 
searchers  Bernard  Wu  and 
Evgenii  Narimanov  say  they 
have  found  a  way  to  send 
encrypted  data  in  the  noise 
that  accompanies  fiber¬ 
optic  cable  signals.  Accord¬ 
ing  to  CCN  Magazine,  the 
sender  converts  a  message 
into  a  short  light  pulse.  It  is 
then  spread  into  a  stream  of 
optical  data,  and  the  recipi¬ 
ent  uses  knowledge  of  how 
the  message  was  spread  to 
pick  it  out  from  the  noise 
and  decrypt  it 


Budget  Office’s 
Server  Breached 

The  Congressional  Budget 
Office  reported  that  some¬ 
one  breached  one  of  its 
servers  and  obtained  e-mail 
addresses  of  mailing-list 
subscribers.  Law  enforce¬ 
ment  officials  have  begun 
an  investigation. 


Let  Internet  Security  Systems  stop 

network  threats  before  they  impact  your  business 


How  do  you  ensure  compliance  and  manage  costs  when  your  security  is  less  than  certain?  Even  "zero-day"  solutions  aren't  fast  enough  to 
protect  against  losses  once  an  Internet  attack  hits.  The  alternative  is  preemptive  security  from  Internet  Security  Systems.  Because  our  enterprise 
solutions  are  based  on  the  world's  most  advanced  vulnerability  research,  only  ISS  can  can  offer  preemptive  security  and  stop  threats  More  they 

impact  your  business.  So  why  rely  on  "reaction"  when  security  can  be  a  sure  thing? 


Need  proof?  Get  a  free  whitepaper,  Preemptive  Security:  Changing  the  Rules,  at  www.iss.net/proof  or  call  800-776-2362. 


Internet  |  Security  i  Systems® 

Ahead  of  the  threat. 


NETWORK  &  HOST  INTRUSION  PREVENTION 


MANAGED  SECURITY  SERVICES 


VULNERABILITY  MANAGEMENT 
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WHO  HAS  Bl? 

■  Have  a  Bl  system  in  place  ■  No  Bl  system  in  place 


Midsize  companies  (100-999  employees): 


Base:  345  IT  and  business  professionals 


THINKING  POSITIVE 

,  measurable  impact: 


Bl  has  had  a  very  positive,  i 

Bl  has  had  a  very  positive  impact, 
quantify: 


Bl  has  made  some  things  better, 
but  there’s  still  progress  to  be  made: 

Bl  hasn’t  changed  our  situation: 

. . . __ 

Bl  has  had  a  negative  impact: 

1% 


Note:  Percentages  exceed  100  because  of  rounding. 

Base:  213  IT  and  business  professionals  at  companies 
with  a  Bl  system  in  place 


it  happened  —  is  it  an  error,  a  trend?  Instead  of  the 
approach  [of],  “Here’s  a  query  tool,  hope  you  find 
something  impactful,”  we’re  figuring  out  how  to  get 
actionable  information  into  everyone’s  hands. 

Business  performance  management  is  built  on  Bl, 
but  it  goes  beyond  that;  it’s  also  thinking  about  opera¬ 
tional  and  planning  capabilities.  You  need  to  develop 
plans:  How  do  you  know  whether  information  is 
good  or  bad?  Whose  gut  feeling  do  you  go  with? 

BPM  is  the  next  big  thing.  It’s  sort  of  what  Bl  is 
growing  up  to  become.  Data  quality  matters  [because 
BPM  is]  tied  to  operational  planning.  If  you  do  it 
right,  you  have  to  really  believe  in  the  numbers. 


What  has  held  up  Bl  adoption?  It’s  typically  not 
technology  that  holds  adoption  back;  it’s  business  cul¬ 
ture  and  organization.  Technically,  we’ve  come  a  long 
way.  Information  objects  are  getting  so  much  more  so¬ 
phisticated  and  intelligent.  If  we  could  fast-forward  in  a 
time  machine  and  grab  the  software  of  five  years’  time, 
it  still  wouldn’t  increase  the  rate  of  adoption. 
You’ve  got  to  go  through  that  cultural  knot¬ 
hole  of  “Everybody  knows  how  I’m  doing.”  If 
you  have  perfect  transparency  with  Bl,  it’s  not 
an  issue;  partial  transparency  is  the  issue.  It’s 
“I’ll  show  you  mine,  but  I  can’t  see  all  of  yours.” 

Second-tier  management  is  concerned 
about  losing  their  secured  information 
and  the  ability  to  position  information  in 
the  best  possible  light.  Once  Bl  is  in  place, 
people  can  get  concerned  and  reveal  hidden 
agendas.  There  are  no  more  secrets.  The 
right  people  have  access  to  what  they  need. 

There  are  three  groups:  early  adopters  who 
just  dive  in,  those  who  suffer  from  inertia  and 
a  small  group  trying  to  work  against  goals  of 
the  organization  selfishly. 


How  do  industries  stack  up  in  terms  of  Bl  adoption? 
What’s  the  geographic  distribution  of  Bl  users? 

Finance  is  all  over  it;  they’ve  got  no  choice.  For  years, 
consumer  packaged  goods  [companies]  were  one  of 
the  early  innovators.  Probably  35%  of  people  using  Bl 
are  in  finance,  then  consumer  packaged  goods,  retail, 
manufacturing  and  government,  and  then  it  trails  off. 
Everyone  understands  it’s  important.  There’s  some 
health  care  and  education,  but  they  both  have  limited 
[IT]  budgets. 

The  geographies  where  Bl  is  extremely  well  estab¬ 
lished  and  quite  mature  are  North  America,  Western 
Europe  and  Australia.  The  emerging  markets  are 
in  Asia-Pacific,  including  Japan,  and  South  America. 
China  is  growing,  but  they  don’t  have  the  inclination 
to  spend  money  on  Bl;  they  want  to  get  it  for  cheap. 
That  will  change. 


How  will  Bl  develop?  Customers  want  to  buy  a  port¬ 
folio  of  functionality;  they  want  it  to  be  fluid.  Service- 
oriented  architecture  plays  into  it,  and  Web  services. 

For  instance,  before  a  company  grants  someone  financ¬ 
ing  credit,  you’d  want  to  access  their  propensity  to  pay. 
It’s  about  managing  a  process  and  integration  in  context 
of  the  process.  We  support,  the  management  of  process 
with  technology.  Before,  we  did  the  analysis  in  isolation. 

Bl  will  persist.  We’re  seeing  an  inflection  point  in 
the  market  and  hearing  more  about  BPM  and  BPM 
enabled  by  Bl. » 


OWARD  DRESNER  coined 
the  term  “business  intelligence” 
in  1989  while  an  analyst  at 
research  firm  Gartner  Inc.  At 
that  time,  the  software  industry 
was  mired  in  acronyms  like 
DSS  (decision  support  system) 
and  EIS  (executive  information 
system),  and  Dresner  was  seeking  a  term  that  would 
elevate  the  debate  and  better  define  the  analysis  of 
quantitative  information  by  a  wide  variety  of  users. 

He  left  Gartner  in  2005  to  join  Hyperion  Solutions 
Corp.  as  chief  strategy  officer.  Dresner  recently  talk¬ 
ed  with  IDG  News  Service  reporter  China  Martens 
about  the  past  17  years  of  Bl  and  its  evolution  into 
“business  process  management”  (BPM). 


Does  today’s  definition  of  Bl  differ  from  what  you 
originally  intended?  It’s  probably  been  redefined  a 
little.  It’s  all  about  ways  to  deliver  information  to  end 
users  without  needing  them  to  be  experts  in 
operational  research.  Early  on,  some  com¬ 
panies  tried  to  make  the  term  even  broader 
than  “quantitative  information”  to  include 
unstructured  content.  But  it  became  clear 
that  it  was  a  simple  problem  which  needed 
to  be  solved  with  structured  content.  That 
provides  far  more  value  to  business  than 
trying  to  boil  the  entire  ocean.  Bl  is  in  the 
middle,  [with]  structured  information  at  one 
end  and  the  user  at  the  other  end. 

Back  in  1989,  only  a  select  development 
group  understood  what  it  was  about  and 
were  trying  it.  I  felt  like  the  lone  voice  in  the 
wilderness  for  years.  Some  people  said  busi¬ 
ness  intelligence  was  an  oxymoron. 


Have  the  general  improvements  in  com¬ 
puter  technology  made  Bl  more  readily  adoptable? 

Possibly,  possibly  not.  It’s  more  how  do  you  work  out 
the  value  you’re  really  going  to  get  out  of  it.  You  do 
find  a  lot  of  Bl  was  shelfware  or  partial  shelfware, 
meaning  it  already  got  installed  but  people  didn’t 
use  it.  We’d  just  give  someone  a  query  tool  and  a 
data  warehouse  and  say  a  prayer.  It  probably  wasn’t 
enough.  [We  figured]  we’d  give  them  query  tools  and 
warehouses,  and  somehow  life  would  be  better. 

The  next  big  thing  is  how  to  give  people  insight. 

Say  the  cost  of  a  product  line  spiked;  you  know  that 
nugget  of  insight.  Then  you  need  to  figure  out  why 


17m  The  father  of 
UlliJ ‘business 
intelligence’ 

looks  back  at  the 
term  he  coined  —  and 
forward  to  what  may  be 
the  next  big  thing. 


■ 


king  from  the  new  AT&T  enables  converged 
'Cations  worldwide.  By  proactively  identifying  changes  in  traffic 
n  real  time,  Stephen's  network  can  move  resources  more 
Learn  how  Dynamic  Networking  can  enable  your  business. 
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Open-source  Tool 
Supports  Windows 

■  Hyperic  Inc.  has  announced 
that  the  new  version  of  its  Hy¬ 
peric  HQ  open-source  systems 
management  software  adds 
Windows  to  the  list  of  operating 
systems  it  supports,  bringing  the 
total  to  nine.  The  San  Francisco- 
based  company  said  Hyperic 
HQ  lets  systems  administrators 
use  a  single  interface  to  monitor, 
set  alerts  for  and  analyze  any 
Windows  application,  including 
Exchange,  Internet  Information 
Server,  .Net  and  SQL  Server.  A 
free  version  is  available  at  www. 
hyperic.com/downloads.  The 
enterprise  version  includes  ad¬ 
ditional  tools;  it  has  an  average 
annual  price  of  $500  per  man¬ 
aged  machine.  Site  licenses  are 
available  for  large  deployments. 


Numara  Releases 
Help  Desk  Software 

■  Numara  Software  Inc.  in  Tam¬ 
pa,  Fla.,  has  released  Version 
7.5  of  its  Footprints  software  for 
Web-based  help  desk  and  cus¬ 
tomer  support.  Developed  by  Uni- 
Press  Software  Inc.,  which  was 
recently  acquired  by  Numara, 
Footprints  7.5  can  automatically 
record  escalation  processes, 
fill  in  time  fields  based  on  local 
time  zones  and  compare  metrics 
across  days,  months  or  other 
time  intervals.  Per-agent  li¬ 
censes  start  at  $1,055.  A  starter 
package  is  priced  at  $9,995 
for  server  software  and  three 
agents. 


Juniper  Unveils 
Three  Appliances 

■  Juniper  Networks  Inc.  in 
Sunnyvale,  Calif.,  last  week  an¬ 
nounced  the  DX  3280  and  DX 
3680  data  center  acceleration 
appliances  and  the  WXC  590 
WAN  application  acceleration 
appliance.  All  three  have  soft¬ 
ware  upgrades  to  improve  appli¬ 
cation  throughput.  Juniper  said. 
The  WXC  590,  available  now, 
starts  at  $24,995;  software 
starts  at  $5,795  for  a  10-site 
license.  The  DX  3280,  due  in  the 
first  quarter  of  2007,  will  cost 
$24,995.  The  DX  3680,  avail¬ 
able  now,  costs  $49,995. 
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The  E-voting  Blame  Game 


IF  YOU  THINK  Microsoft  has  security  PR  prob¬ 
lems,  just  look  at  Diebold  Election  Systems,  which 
is  entangled  in  a  seemingly  endless  imbroglio  over 
computerized  voting  machines.  The  vendor  has 
been  under  continuous  assault  by  academics,  ad¬ 
vocacy  groups,  security  experts  and  government  offi¬ 
cials  over  technical  and  security-related  glitches  involv¬ 
ing  its  touch-screen  e-voting  systems  and  software. 


Some  criticism  has  been 
deserved,  but  in  other 
cases,  problems  in  the 
field  have  more  to  do  with 
the  dubious  practices  of 
the  officials  operating  the 
machines  than  with  the 
technology  itself. 

With  touch-screen 
e-voting  systems,  also 
called  direct  recording 
equipment  (DRE),  there’s 
no  paper  ballot  to  hold  on 
to  as  the  physical  embodi¬ 
ment  of  a  vote  and  no  way 
to  know  that  your  elec¬ 
tronic  ballot  really  dropped 
into  the  electronic  black  box.  Although 
the  electorate  may  feel  safer  with  pa¬ 
per,  fully  electronic  systems  should  be 
more  flexible,  reliable  and  efficient. 

Computers  have  been  used  success¬ 
fully  to  read,  tally  and  report  on  paper 
ballots  for  years.  Punch-card  readers 
and  optical  scanners  feed  voting  results 
into  back-end  tabulation  and  reporting 
systems.  DRE  technology  takes  automa¬ 
tion  a  step  further.  It  was  supposed  to 
alleviate  paper-handling  problems,  such 
as  the  infamous  hanging  chads  that 
sometimes  afflicted  punch  cards,  but  it 
has  brought  its  own  challenges. 

While  some  of  the  problems  associ¬ 
ated  with  e-voting  are  technology- 
based,  many  simply  amount  to  a  lack  of 
best  practices.  For  example,  e-voting 
machines  initially  didn’t  generate  paper 
records,  so  Diebold  now  includes  a 
thermal  printer.  The  printed  summary, 
viewable  through  a  window,  reassures 
the  voter  and  provides  a  paper-based 
alternative  that  officials  can  use  to  ver¬ 
ify  the  electronic  tabulations.  But  the 
Election  Science  Institute,  in  review¬ 


ing  a  Maryland  election, 
worried  that  paper  jams  or 
printer  malfunctions  could 
cause  “profound”  problems. 
The  advocacy  group  sug¬ 
gested  extensive  training  of 
poll  workers. 

Training  is  clearly  neces¬ 
sary.  Some  officials  don’t 
even  have  the  most  basic 
procedures  down.  During 
a  recent  Maryland  election, 
officials  in  one  county  failed 
to  deliver  to  the  polls  the  ac¬ 
cess  cards  voters  needed  to 
operate  e-voting  machines. 
In  another  county,  officials 
couldn’t  operate  e-voting  machines  be¬ 
cause  they  didn’t  have  their  passwords. 
Politicians  blamed  the  technology.  One 
lawmaker  introduced  legislation  to  ban  it. 

But  politicians  have  no  one  to  blame 
but  themselves.  The  government  pro¬ 
vided  funding  to  acquire  e-voting 
machines,  but  it  budgeted  little  to  train 
people  on  how  to  operate  the  technol¬ 
ogy,  according  to  a  September  report 
by  the  Computer  Science  and  Telecom¬ 
munications  Board,  an  arm  of  the  Na¬ 
tional  Research  Council.  Any  IT  pro¬ 
fessional  could  have  told  them  that  the 
cost  of  acquiring  technology  is  a  small 
portion  of  total  cost  of  ownership.  The 
potential  for  chaos  in  the  November 
election,  when  an  estimated  40%  of 
the  population  will  use  DREs,  is  exac¬ 
erbated  by  that  miscalculation. 

What’s  worse,  there’s  an  appalling 
lack  of  concern  for  security  in  some 
states.  For  example,  it’s  common  in 
some  locales  to  distribute  e-voting  ma¬ 
chines  to  the  homes  of  election  officials 
for  “sleepovers”  for  several  days  prior 
to  an  election.  With  physical  security 


practically  nonexistent,  the  disclosure 
of  a  vulnerability  in  e-voting  machines 
that  could  allow  someone  with  physi¬ 
cal  access  to  reprogram  the  device 
made  the  situation  much  more  serious. 
A  Florida  official  acknowledged  the 
sleepover  practice  but  was  quick  to 
place  full  responsibility  on  the  vendor. 

That’s  not  to  say  that  the  e-voting 
machines  haven’t  had  problems.  Vul¬ 
nerabilities  have  cropped  up,  and 
Diebold  has  been  accused  of  being 
slow  to  disclose  vulnerabilities  af¬ 
ter  discovering  them.  Glitches  have 
caused  machines  to  crash.  And  critics 
want  more  outside  scrutiny  of  the  pro¬ 
prietary  code. 

Nonetheless,  e-voting  technology 
has  slowly  improved  over  time.  But 
that  perception  of  a  lack  of  cooperation 
and  openness  has  fanned  suspicions 
and  spawned  a  cottage  industry  of 
alienated  academics  and  public  advo¬ 
cates  who  are  all  too  eager  to  trumpet 
to  the  press  every  potential  deficiency 
they  discover.  Often,  those  conclusions 
appear  to  have  been  reached  and  pub¬ 
licly  announced  without  consulting  the 
engineers  who  designed  the  systems. 

Computerized  voting  can  work,  but 
not  without  the  public’s  support.  Test¬ 
ing  by  the  U.S.  Election  Assistance 
Commission  (EAC)  isn’t  enough. 
Diebold  and  other  e-voting  vendors 
need  to  work  within  the  framework  of 
an  independent  technical  group  with 
representatives  from  industry,  govern¬ 
ment,  academia  and  other  sectors.  That 
organization  should  establish  a  set  of 
technology  standards,  create  a  review 
process  and  certify  compliance  for 
e-voting  systems.  It  should  also  build 
on  the  EAC’s  Best  Practices  Toolkit  to 
develop  better  procedures. 

E-voting  isn’t  going  away.  The  tech¬ 
nical  problems  will  be  solved.  But 
that’s  the  easy  part.  Getting  attitudes 
to  change  —  and  getting  politicians, 
election  officials  and  poll  workers  to 
implement  the  technology  properly 
and  be  accountable  to  best  practices 
—  will  be  the  bigger  challenge.  * 
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Got  Questions  About 
Application  Performance? 

Computerworld’s  IT  Executive  Summit  Has  the  Answers 


Today’s  businesses  are  challenged  in  delivering  high 
perfomance  applications.  Whether  it's  system  com¬ 
plexity,  overcoming  the  barriers  to  enabling  rapid 
change  and  collaboration,  or  discovering  problems  too 
late  to  effectively  fix  them,  the  hurdles  are  daunting 
for  those  leading  today's  application  deployment. 

To  overcome  the  obstacles,  IT  managers  need  to 
identify  and  elimate  performance  production  problems 
early  and  build  performance  into  applications  from  the 
earliest  phases  of  the  development  life  cycle,  rather 
than  attempting  to  test  too  late. 

This  IT  Executive  Summit  will  explore  how  companies 
have  effectively  dealt  with  these  challenges  and  how 
they’ve  found  solutions.  And  it  will  outline  the  ques¬ 
tions  IT  needs  to  ask  and  answer  to  optimize  appli¬ 
cation  performance  throughout  their  organization. 

Apply  to  attend  Computerworld's  complimentary 
half-day  IT  Executive  Summit:  Ahead  of  the  Curve: 
Optimizing  Application  and  Business  Performance. 

*  Complimentary  registration  is  restricted  to  qualified 
IT  directors  only. 


November  1 6,  2006  •  Falls  Church,  Virginia 

Fairview  Park  Marriott 
8:00am  to  Noon 


Ahead  of  the  Curve:  Optimizing 
Application  and  Business  Performance 


8:00am  to  8:30am  Registration  and  Networking  Breakfast 


8:30am  to  8:40am 


Introduction  and  Overview 

Julia  King,  Executive  Editor,  Events  and  National  Correspondent, 
Computerworld 


8:40am  to  9:20am  Market  Overview  and  Trends 

Patrick  Moroney,  President  &  Partner,  The  Barnier  Group  LLC 


9:20am  to  1 0:00am 


Application  Peformance  at  TD  Ameritrade:  An  End-User  Case  Study 

David  Berger,  Chief  Infrastructure  Architect,  TD  Ameritrade 


1 0:00am  to  1 0:1 5am  Refreshment  and  Networking  Break 

10:15am  to  10:50am  Application  Performance  Assurance  Case  Studies: 

It  Pays  to  be  Predictable 

Andrew  Hittle,  Vice  President,  Quality  Assurance  Solutions,  Compuware 


10:50am  to  1 1 :25am 

1 1 :25am  to  Noon 


Application  Performance  at  Humana,  Inc.:  An  End-User  Case  Study 

Ramu  Kannan,  Director  of  IT,  Humana,  Inc. 

Panel  Discussion 

Moderator:  Julia  King,  Executive  Editor,  Events  and  National  Correspondent, 
Computerworld 

Panelists:  David  Berger,  Chief  Infrastructure  Architect,  TD  Ameritrade; 
Ramu  Kannan,  Director  of  IT,  Humana,  Inc.;  Andrew  Hittle,  Vice  President, 
Quality  Assurance  Solutions,  Compuware;  Patrick  Moroney,  President 
&  Partner,  The  Barnier  Group  LLC 


Apply  for  registration  today 

Contact  Jean  Lee  at  888-299-0155 
or  visit:  www.itexecutivesummit.com 
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Technology 


Career  Watch 

Jerry  Luftman  of  the  Society  for  Information 
Management  discusses  employers’  concerns 
about  attracting,  developing  and  retaining  IT 
professionals.  Plus,  we  look  at  the  latest  employ¬ 
ment  numbers,  the  skills  CIOs  are  seeking  and 
your  employer’s  health  care  costs.  PAGE  45 


IT  MENTOR 

Yogi  Berra,  PMP 

Project  manager  Ralph  Sacco 
(left)  discovers  new  insights 
into  his  line  of  work  from  the 
ever-quotable  Yankee  legend. 

PAGE  44 


10.23.06 


OPINION 

IT  Attitude  Check 

Treat  your  customers  as  if  they 
could  take  their  IT  business  else¬ 
where,  says  Bart  Perkins.  It’s  more 
and  more  likely  that  they  can. 

PAGE  50 


WHEN  YOU  look  at  the  IT 
leadership  team  at  Re¬ 
gions  Financial  Corp., 
you  see  a  diverse  group 
of  individuals.  The  vice 
president  of  applica¬ 
tion  delivery  advanced 
through  the  business  ranks,  as  did  the  CIO, 
while  the  other  five  team  members  have 
had  solid  careers  in  IT.  The  vice  president 
of  technology  risk  management  is  known 
for  his  strategic  and  broad  technical  knowl¬ 
edge,  while  the  vice  president  of  telecom¬ 
munications  has  a  more  tactical,  get-it-done 
approach.  The  vice  president  of  production 
services  is  a  natural  communicator  who 
connects  well  with  people  throughout  the 
organization.  The  director  of  information 
management  and  enterprise  architecture 
hails  from  outside  the  banking  industry 
and  has  a  strong  data  management  back¬ 
ground.  The  vice  president  of  the  project 
management  office  has  been  at  Regions  for 
more  than  25  years,  with  management  ex¬ 
perience  in  several  technical  areas. 

But  the  team  members  also  bear  some 
strong  similarities.  Most  would  score  off 
the  charts  on  an  analytical-thinking  test, 
and  all  are  voracious  problem-solvers. 

They  see  IT  as  a  department  that  needs  to 
be  run  as  a  business,  and  there’s  no  ques¬ 
tion  in  their  minds  that  their  common  job 
is  to  support  the  bank’s  strategy. 

When  you  combine  all  these  differences 
and  similarities  in  a  team,  the  group  be¬ 
comes  stronger  than  the  sum  of  its  parts, 
says  John  Dick,  CIO  at  the  $84.6  billion 
financial  organization  in  Birmingham,  Ala. 
This  can  be  invaluable  when  problems 
arise.  For  instance,  a  recent  downturn  in 
the  performance  of  the  bank’s  online  bank¬ 
ing  system  prompted  the  leadership  team 
members  to  jump  in  and  apply  their  various 
approaches  and  skills  rather  than  leave  the 
problem  to  the  application  delivery  group. 

Dick  says  many  leaders  have  yet  to  learn 
about  the  strength  diversity  brings  to  a 
team.  “You  see  it  all  the  time  —  people  se¬ 
lecting  leaders  who  are  exactly  like  them¬ 
selves,  whether  they’re  heavily  analytical 
or  very  creative,”  Dick  says.  “And  while 
homogenous  teams  can  accomplish  a  lot  in 
a  short  amount  of  time,  to  take  it  to  the  next 
level,  you  need  a  team  with  diverse  experi- 
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ence  and  backgrounds.” 

His  team  didn’t  always  perform  at 
such  a  high  level.  When  the  group  was 
formed  five  years  ago,  its  members 
were  more  focused  on  their  individual 
functions,  Dick  says.  That  meant  he 
needed  to  spend  more  of  his  own  time 
bringing  the  right  mix  of  resources  to 
bear  when  issues  arose. 

But  now,  especially  as  the  IT  group 
takes  on  higher-impact  projects  that 
cross  many  functional  areas  of  the 
bank,  “there’s  been  a  shift,”  he  says. 
“Now,  everyone  knows  each  other’s 
skills  and  capabilities,  and  everyone 
gets  engaged  in  problem-solving, 
decision-making  and  fact-finding 
around  lots  of  different  topics.” 

Running  With  the  Big  Dogs 

The  Regions  group  is  a  good  example 
of  what  it  takes  to  climb  to  the  top 
ranks  of  IT  leadership  and  then  thrive 
in  that  rarified  air.  While  technology 
prowess  is  still  important,  it  takes  a 
back  seat  to  leadership  skills  and  solid 
business  acumen,  Dick  and  other  CIOs 
say.  Many  IT  leaders  still  rise  through 
the  technology  ranks,  but  the  elevator 
doors  now  open  exclusively  for  those 
who  can  effectively  lead  other  people 
and  who  put  business  concerns  first. 

This  wasn’t  always  true.  “Just  a  few 
years  ago,  IT  leaders  were  looking  for 
people  with  specialized  skill  sets  —  the 
network  guy,  the  e-mail  person  —  and 
they  wanted  it  all  in-house,”  says 
Sheleen  Quish,  a  consultant  at  Cutter 
Consortium  in  Arlington,  Mass.  “The 
whole  trick  was  to  get  the  right  skills  at 
the  right  level,  at  the  right  price.” 

Today,  however,  those  skilled  spe¬ 
cialists  have  been  replaced  by  people 
who  can  lead  not  just  internal  workers 
but  also  external  vendors  and  integra¬ 
tors  to  drive  business  objectives,  she 
says.  “It’s  a  smaller  group  of  people 
that  have  the  ability  to  work  as  a  team 
and  who  don’t  think  of  themselves  in 
silos,”  Quish  says. 

In  addition,  the  skills,  backgrounds 
and  capabilities  needed  on  the  top  IT 
team  are  so  varied  that  IT  leaders  real¬ 
ize  they  can’t  fill  the  bill  with  one  pro¬ 
file  or  type.  When  Chief  Technology 
Officer  Gary  Greenwald  was  forming 
his  five-person  leadership  team  at  TD 
Ameritrade  in  New  York,  for  example, 
he  says  he  was  conscientious  about 
mixing  personalities  and  strengths. 

“We  do  a  great  deal  of  work  to  un¬ 
derstand  the  mix  of  people  on  the 
team,”  he  says.  “If  someone  is  strong  in 
two,  three  or  four  areas,  we  want  to  off¬ 
set  that  with  individuals  with  skills  in 
three  or  four  other  areas  —  that’s  when 
you  put  a  great  team  together.” 


MANAGEMENT 


The 


THE  TRAITS,  SKILLS  and  competencies 
that  companies  require  in  their  IT  leaders 
have  undergone  many  changes  in  the  past 
few  years.  Some  of  the  most  valued  charac¬ 
teristics  are  too  new,  unusual  or  amorphous 
to  make  it  into  job  descriptions  or  rbsumbs. 
Gary  Greenwald,  CTO  at  TD  Ameritrade, 
talked  about  some  of  these  previously  un¬ 
sung  attributes  that  are  increasingly  valued 
in  IT  leaders. 

Connectivity 

For  years,  technologists  have  been  urged  to 
improve  their  communication  skills.  But  it's 
one  thing  to  communicate  with  people  and 
quite  another  to  connect  with  them.  “Com¬ 
municating  is  broadcasting  and  pushing  out 
information,"  Greenwald  explains.  “Con¬ 
necting  is  that  key  component  of  a  strong 


listener  who  can  take  information  in  as  well 
as  communicate  outwardly."  Greenwald 
says  his  company  looks  for  people  who  can 
internalize  what  they  hear  and  replay  it  back 
to  their  teammates  or  their  clients  to  ensure 
that  they’re  on  the  same  page. 

Courage 

IT  leaders  look  for  people  who  are  coura¬ 
geous  enough  to  share  their  perspectives, 
even  when  they  threaten  to  upset  the  status 
quo.  An  example  is  stopping  a  project 
midway  through  because  you  see  that  it’s 
no  longer  crucial  to  the  business  or  that  a 
change  on  the  technology  landscape  favors 
a  different  approach.  “As  human  beings,  we 
tend  to  avoid  conflict,  but  if  we’re  truly  going 
to  be  a  partner  with  the  business,  we  have 
to  engage  in  those  tough  conversations,  no 
matter  how  challenging,"  Greenwald  says. 

Creativity 

As  businesses  strive  for  innovation  in  their 
products,  services  and  processes,  IT  can 
play  a  strong  role  in  both  supporting  the 
creative  process  and  suggesting  improve¬ 
ments.  “IT  needs  to  be  at  the  table  when 
the  business  is  vetting  new  prospects  and 
possibilities,  and  we  need  to  come  up  with 
our  own  ideas  to  help  bring  these  visions  to 
reality  using  technology,”  Greenwald  says. 

The  role  of  the  technology  leader  is  to 
foster  innovation  among  the  staffers,  some 
of  whom  may  have  insights  that  are  equal  or 
superior  to  those  of  their  business  partners, 
he  says,  adding,  “We  have  to  encourage 
and  reward  people  with  creative  ideas.” 

-MARYBRANDEL 


That’s  why  CIOs  are  not  just  look¬ 
ing  for  highly  capable  individuals 
anymore;  they’re  looking  for  people 
who  can  blend  their  skills,  talents  and 
personalities  into  a  smoothly  operat¬ 
ing  team.  At  Regions,  for  instance, 
teamwork  is  so  important  that  a  couple 
of  people  with  business  expertise  and 
strong  technology  capabilities  were 
actually  let  go  because  “they  fought  the 
team  environment,”  Dick  says.  “They 
wanted  to  be  the  Lone  Ranger  and  get 
all  the  credit  for  their  own  group,  and 
that’s  not  tolerated  here.” 

“We  won’t  allow  one  of  our  team 
members  to  fail,”  adds  Steve  Zimmer¬ 
man,  vice  president  of  technology  risk 
management  at  Regions.  “We’ll  cross 
lines  to  watch  each  other’s  backs.” 

Non-negotiables 

But  for  many  CIOs,  there  are  certain 
competencies  that  are  must-haves 
for  every  member  of  the  top  IT  team. 
When  Jody  Davids,  CIO  at  Cardinal 
Health  Inc.  in  Dublin,  Ohio,  formed 
her  12-person  IT  team  last  year,  her 


No.  1  objective  was  to  find  people  with 
strong  leadership  capabilities.  And  no 
wonder:  These  people  have  to  function 
in  a  company  that,  because  of  its  many 
acquisitions,  is  undergoing  fast  growth. 

Two  years  ago,  Cardinal  Health  went 
through  a  radical  shift  to  a  shared- 
services  strategy,  centralizing  previ¬ 
ously  autonomous  IT  departments 
throughout  the  world.  “They  need  to 
deal  with  constant  change  in  an  or¬ 
derly  fashion,”  Davids  says. 

Her  hand-picked  team  includes  four 
people  who  head  the  IT  “centers  of  ex¬ 
pertise,”  which  handle  business  man¬ 
agement,  IT  strategy,  risk  management 
and  enterprise  architecture.  Another 
team  member  is  in  charge  of  the  IT 
infrastructure  group,  and  another  leads 
the  application  development  area.  Six 
additional  people  lead  the  business- 
partner  teams;  their  main  job  is  to  en¬ 
sure  business/technology  alignment. 

But  no  matter  which  roles  they  play, 
the  most  important  thing  each  team 
member  brings  to  the  picture  is  what 
Davids  calls  “a  bundle  of  skills”  around 
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communication,  strategic  thinking, 
facilitation,  influence,  the  ability  to 
foster  “followership”  on  a  team  and  the 
wherewithal  to  work  through  complex 
situations.  They  also  need  to  be  lik¬ 
able,  knowledgeable  and  trustworthy, 
Davids  adds.  These  leadership  quali¬ 
ties  are  even  more  important  than  the 
person’s  previous  experience,  she  says. 

A  good  example  is  Pegge  LaValle,  the 
woman  Davids  chose  to  lead  the  busi¬ 
ness  management  center  of  expertise 
and  who  had  previously  run  the  cus¬ 
tomer  service  organization  at  Cardinal 
Health.  “I  asked  her  to  run  the  business 
management  area,  and  she  said  she  had 
nothing  like  that  in  her  background,” 
Davids  says.  “But  when  I  thought  about 
what  it  took  to  be  successful  in  that 
role,  it  wasn’t  about  finance.  I  needed  a 
master  diplomat,  a  person  very  skilled 
at  building  relationships  and  who  could 
negotiate  tough  situations  with  client 
groups  when  pulling  budgets  together 
—  and  this  is  the  person  who  came  to 
mind  right  away.” 

Davids  persuaded  LaValle  to  take  the 
job,  pointing  out  that  she  could  hire 
people  with  financial  and  budgetary 
backgrounds  to  support  her.  “She  had 
never  envisioned  doing  anything  like 
this,  but  it  turns  out  I  was  right.  She’s  be¬ 
come  extremely  effective,”  Davids  says. 

Another  example  is  Jim  Egan,  the 
leader  of  the  IT  infrastructure  group, 
whose  background  was  not  in  infra¬ 
structure  but  in  application  develop¬ 
ment.  “I  knew  he  was  a  strong  leader 
with  a  great  deal  of  acumen  around 
the  business  of  running  IT,  which  you 
need  when  you’re  managing  an  enor¬ 
mous  budget  and  a  significant  number 
of  assets  and  you’re  cutting  large  deals 
with  suppliers  on  a  regular  basis,”  says 
Davids.  She  also  knew  that  he  was  able 
to  assemble  and  manage  a  strong  team 
and  that  he  had  excellent  strategy  de¬ 
velopment  and  execution  capabilities. 

Likewise,  Steve  Collignon,  the  per¬ 
son  chosen  to  lead  the  risk  manage¬ 
ment  area,  had  previously  run  Cardinal 
Health’s  technology  infrastructure. 
Although  he  had  no  explicit  experience 
in  risk  management,  it  was  more  im¬ 
portant  to  Davids  that  he  was  capable 
of  building  a  brand-new  operation  and 
had  an  exceptional  ability  to  work  ef¬ 
fectively  with  people. 

“Anybody  in  IT  understands  that  if 
it  weren’t  for  change,  we  wouldn’t  have 
a  job,”  Davids  says.  “The  ability  to  lead 
people  through  change  is  what  makes 
the  difference.”  * 


Brandel  is  a  Computerworld  contribut¬ 
ing  writer  in  Newton,  Mass.  Contact  her 
at  marybrandel@verizon.net. 


Got  Questions  About 
Application  Performance? 

Computerworld’s  IT  Executive  Summit  Has  the  Answers 


Today’s  businesses  are  challenged  in  delivering  high 
performance  applications.  Whether  it's  system  com¬ 
plexity,  overcoming  the  barriers  to  enabling  rapid 
change  and  collaboration,  or  discovering  problems  too 
late  to  effectively  fix  them,  the  hurdles  are  daunting 
for  those  leading  today’s  application  deployment. 

To  overcome  the  obstacles,  IT  managers  need  to 
identify  and  elimate  performance  production  problems 
early  and  build  performance  into  applications  from  the 
earliest  phases  of  the  development  life  cycle,  rather 
than  attempting  to  test  too  late. 

This  IT  Executive  Summit  will  explore  how  companies 
have  effectively  dealt  with  these  challenges  and  how 
they've  found  solutions.  And  it  will  outline  the  ques¬ 
tions  IT  needs  to  ask  and  answer  to  optimize  appli¬ 
cation  performance  throughout  their  organization. 

Apply  to  attend  Computerworld’s  complimentary 
half-day  IT  Executive  Summit:  Ahead  of  the  Curve: 
Optimizing  Application  and  Business  Performance. 

*  Complimentary  registration  is  restricted  to  qualified 
IT  directors  only. 


October  26,  2006  •  Orlando,  Florida 

The  Ritz-Carlton  Orlando,  Grande  Lakes 
8:00am  to  Noon 


Ahead  of  the  Curve:  Optimizing 
Application  and  Business  Performance 

8:00am  to  8:30am  Registration  and  Networking  Breakfast 


8:30am  to  8:40am 


Introduction  and  Overview 

Ron  Milton,  Executive  Vice  President,  Computerworld 


8:40am  to  9:20am 


9:20am  to  1 0:00am 


Market  Overview  and  Trends 

Carlos  Recalde,  Managing  Director,  Successful  Technology,  LLC 


HA  Holistic  Approach  to  End-to-End  Service  Assurance 

Dr.  John  S.  Camp,  Chief  Information  Officer,  Wayne  State  University 


10:00am  to  10:15am 


Refreshment  and  Networking  Break 


10:15am  to  10:50am  Application  Performance  Assurance  Case  Studies: 

It  Pays  to  be  Predictable 

Andrew  Hittle,  Vice  President,  Quality  Assurance  Solutions,  Compuware 


1 0:50am  to  1 1 :25am  Application  Performance:  An  End-User  Case  Study 

Ramu  Kannan,  Director  of  IT,  Humana,  Inc. 

1 1 :25am  to  Noon  Panel  Discussion 

Moderator:  Ron  Milton,  Executive  Vice  President,  Computerworld 
Panelists:  Dr.  John  S.  Camp,  Chief  Information  Officer,  Wayne  State 
University;  Ramu  Kannan,  Director  of  IT,  Humana,  Inc.;  Andrew  Hittle,  Vice 
President,  Quality  Assurance  Solutions,  Compuware;  Carlos  Recalde, 
Managing  Director,  Successful  Technology 


Apply  for  registration  today 

Contact  Jean  Lee  at  888-299-0155 
or  visit:  www.itexecutivesummit.com 


■V  A 
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IF  BASEBALL  and  project 
management  have  one 
thing  in  common,  it’s  the 
direct  relationship  be¬ 
tween  teamwork  and  suc¬ 
cess.  Yogi  Berra,  a  baseball 
legend  with  a  unique  approach  to 
management  and  life,  is  a  particu¬ 
lar  favorite  of  mine,  so  I  recently 
asked  myself,  “What  if  Yogi  were  a 
project  manager?” 

As  I  thought  about  it,  I  realized 
that  Yogi  has  a  lot  to  say  about  my 
line  of  work.  Many  of  the  most  fa¬ 
mous  quotes  that  have  been  attrib¬ 
uted  to  him  seem  to  bear  directly 
on  the  art  and  science  of  project 
management. 

PLANNING 

4  4  You’ve  got  to  be  very  careful 
if  you  don’t  know  where  you’re 
going,  because  you  might  not  get 
there.  )  )  Have  you  ever  man¬ 
aged  a  project  for  which  the  prem¬ 
ise  was  faulty?  If  this  issue  is  not 
resolved  during  project  initiation, 
you  have  a  major-league  problem. 
It’s  like  when  the  umpire  expects 
your  pitcher  to  hit  a  tiny  strike 
zone.  Executing  to  a 
faulty  premise  is  un¬ 
pleasant  at  best  and  de¬ 
bilitating  at  worst.  Your 
team  can’t  get  traction,  and  morale 
inevitably  suffers.  If  the  client  (or 
your  management)  sets  unreason¬ 
able  standards,  you  have  to  get  out 
of  the  dugout  and  argue  balls  and 
strikes.  But  you  need  to  get  your 
facts  straight  and  communicate 
with  the  decision-makers  in  no 
uncertain  terms. 

COMMUNICATING 

4  4 1  didn’t  really  say  everything 
I  said.))  Miscommunication: 
the  gift  that  keeps  on  giving.  How 
many  times  have  you  held  a  proj¬ 
ect  meeting  and  been  surprised 
that  it  wasn’t  the  “check  the  box” 
event  you  expected?  Yogi  knew 
what  he  was  talking  about:  What  I 
think  I  say  and  what  you  think  you 
hear  can  be  two  different  things. 
Who’s  on  first? 

DECISION-MAKING 
4  4  If  you  come  to  a  fork  in  the 
road,  take  it.))  Foster  a  culture 
of  decisiveness  and  clear  execu¬ 
tion.  I  can’t  think  of  one  thing 
better  for  morale,  credibility  and 
project  effectiveness.  This  doesn’t 
mean  making  arbitrary  decisions 
or  carving  plans  in  stone.  It  means 
putting  in  the  effort  with  manage- 


WHEN  YOGI  BERRA  was  managing 
the  New  York  Yankees,  the  parallels  be¬ 
tween  his  job  and  that  of  a  project  man¬ 
ager  were  obvious.  But  I  like  to  think  that 
his  earlier  position  -  as  a  15-time  all-star 
and  three-time  MVP  catcher  -  also  has 
a  lot  in  common  with  mine.  Think  about 
what  a  great  catcher  like  Berra  does: 

■  Positions  himself  between  the  team 
and  the  power  figure  (umpire/customer). 

■  Stands  up  for  the  team  when  there’s 
a  bad  call. 

■  Faces  his  team  (literally)  and  watches 
them  execute  throughout  the  game. 


ment  and  team  members  to  make 
well-thought-out  decisions  that 
naturally  stand  the  test  of  time. 
And  it  means  weighing  the  trade¬ 
offs  in  terms  of  cost,  prestige  and 
momentum  when  facing  the  pos¬ 
sibility  of  changing  decisions  that 
have  already  been  made. 

MEASURING  PROGRESS 

4  4  You’d  better  cut  the  pizza 

in  four  pieces,  because  I’m  not 

hungry  enough  to  eat 

six.))  Earned  value 
(once  calibrated,  simu¬ 
lated  and  adopted)  is  a 
very  good  barometer  for  justifying 
course  corrections  —  if  you  stick 
with  it.  But  I  have  been  on  projects 
where  the  management  team  has 
tossed  out  the  measures  when  the 
news  was  trending  bad.  You  can 
slice  and  reslice  the  numbers,  but 
it’s  the  same  pizza.  In  the  end, 
you’ll  still  get  indigestion. 

EXECUTING 

4  4  Think?  How  the  hell  are  you 
gonna  think  and  hit  at  the  same 
time?)  )  Yogi  clearly  under¬ 
stands  the  distinction  between 
planning  and  execution,  and  so 
should  you.  Once  the  plan  is  in 
place,  get  out  of  your  team’s  face 
and  let  them  do  the  voodoo  that 
they  do  so  well.  I  find  that  dur¬ 
ing  the  execution  phase,  the  best 
approach  for  me  is  low-touch 
—  unless  things  are  going  very 
wrong.  Try  not  to  tweak  things  to 
death.  How  can  your  team  keep 
their  eyes  on  the  ball  if  you’re  con¬ 
stantly  yelling  instructions  from 
the  dugout? 

MANAGING 

4  4  You  can  observe  a  lot  just  by 
watching. )  )  Remember  man¬ 
agement  by  walking  around,  or 


■  Mostly  plays  defense. 

■  Guides  the  pitcher  but  lets  him  call 
the  shots. 

■  Provides  coaching  when  needed 
(mound  visits  are  management  by 
walking  around). 

■  Greatly  influences  the  tempo  of 
the  game. 

■  Communicates  with  opposing  forces 
to  keep  them  in  check  (rattles  the 
batters). 

■  Stays  out  of  the  way  and  is  often  the 
backbone  of  the  team  but  gets  little  glory. 

-  RALPH  SACCO 


MBWA?  There’s  no  better  way  to 
get  that  all-important  gut  check  on 
project  stats.  But  remember,  there’s 
a  difference  between  chatting  it  up 
with  the  guys  in  the  dugout  and 
second-guessing  every  fastball. 

MEETING  DEADLINES 

4  4 1  knew  I  was  going  to  take  the 
wrong  train,  so  I  left  early.)) 

Have  you  ever  been  on  a  project 
where  no  tasks  were  completed 
late?  Me,  neither.  It’s  a  fact  that 
some  tasks  are  going  to  be  late. 

But  there’s  something  you  can 
do  about  it.  While  not  appropri¬ 
ate  for  every  project,  one  option 
is  to  make  it  a  “project  theme”  to 
be  early  whenever  you  can.  For 
example,  you  can  authorize  some 
overtime  for  key  tasks  from  the 
start.  Build  up  a  lead  from  the  get- 
go  even  though  you  aren’t  behind 
(yet).  This  way,  you  can  move 
things  along  and  reduce  your 
overall  risk,  especially  when  you 
get  on  the  wrong  train  later  on. 

CLOSEOUT 

4  4  This  is  like  d6j&  vu  all  over 

again. )  )  We  perform  the  “les¬ 
sons  learned”  project  phase  for  a 
reason.  Yet  how  may  times  have 
we  gotten  deep  into  the  next  build 
phase  only  to  realize  there  are 
still  loose  ends  —  just  like  the  last 
time?  If  we  don’t  apply  the  lessons 
learned,  did  we  really  learn  them? 

You’ve  heard  the  saying  that  the 
definition  of  insanity  is  doing  the 
same  thing  over  and  over  again 
and  expecting  a  different  result. 
When  you  watch  the  game  films, 
pay  attention. » 


Sacco  is  a  project  manager  at 
a  large  East  Coast  technology 
company.  Contact  him  at  ralph@ 
ralphsacco.com. 
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What’s  Hot 


Percentage  of  CIOs  who  said  these  tech  skills 
are  most  in  demand  in  their  IT  departments: 

Microsoft  Windows  Server 
2000/2003  administration 

80% 

Network  administration 
(Cisco,  Nortel,  Novell) 

79% 

Database  management 
(Oracle,  SQL  Server,  DB2) 

71% 

Job  categories  that  are  experiencing  the 

most  growth  within  the  CIOs’  departments: 

Help  desk/end-user  support 

19% 

Networking 

18% 

Applications  development 

12% 

NOTE:  Survey  respondents  were  permitted  to  cite  multiple  skills. 


SOURCE:  ROBERT  HALF  TECHNOLOGY'S  QUARTERLY  IT  HIRING  INDEX  AND  SKILLS  REPORT,  A  NATIONAL  POLL 
OF  MORE  THAN  1,400  CIOS  FROM  A  RANDOM  SAMPLE  OF  U  S  COMPANIES  WITH  MORE  THAN  100  EMPLOYEES 


. . .  but  held  back 
by  a  dearth  of 
talent,  says  AEA 


The  U.S.  technology  industry  added  more 
than  140,000  jobs  between  January  and 
July,  nearly  double  the  78,900  tech  jobs 
added  in  the  first  half  of  2005,  according 
to  a  study  released  in  September  by  the 
Washington-based  American  Electronics 
Association  (AEA),  a  nationwide  nonprofit 
trade  group  that  represents  all  segments  of 
the  technology  industry. 

“We're  seeing  the  largest  six-month  gain 
in  tech  industry  jobs  that  we’ve  seen  in  any 
six-month  period  since  2001,’ 
said  Josh  James,  one  of  the 
authors  of  the  report. 

Technology  manufacturers 
saw  a  net  increase  in  jobs  of 
33,100  in  the  U.S.  in  the  first 
half  of  the  year,  for  a  total  of 
1.37  million  jobs,  while  the 


high-tech  services  sectors  -  including 
communications,  software,  and  engineer¬ 
ing  and  tech  services  -  saw  a  net  increase 
of  107,000  jobs,  for  a  total  of  4.44  million 
jobs.  In  that  sector,  engineering  and  tech 
services  added  the  most  net  jobs  (49,800), 
followed  by  software  services,  which  added 
44,500  net  jobs. 

Even  the  communications  services  sec¬ 
tor  saw  its  first  net  job  growth  since  2000, 
adding  12,700  jobs,  according  to  the  AEA. 

“The  less-good  news  is  [that]  despite 
this,  tech  industry  job  growth  is  still  lagging 
that  of  the  private  sector,”  James  said. 
“What  we  see  from  this  is  that  tech  compa¬ 
nies  are  hiring  for  technical  positions  inside 
the  U.S.,  but  they're  having  a  hard  time 
filling  those  positions.  This  growth  could 
accelerate  if  companies  were  better  able  to 
get  qualified  workers  for  these  positions." 

The  AEA’s  findings  back  up  the  latest 
CIO  Magazine  Tech  Poll, 
which  has  indicated  for  some 
time  that  CIOs  at  companies 
with  5,000  or  more  employees 
have  been  having  more  dif¬ 
ficulty  finding  and  keeping  IT 
workers. 

-  LINDA  ROSENCRANCE 


Net  job  increase 
in  the  first  half 
of  2006  for 
the  high-tech 
services  sector. 


Jerry  Luftman 


vice  president 
for  academic  commu¬ 
nity  affairs 


ORGANIZATION:  Society  for 
Information  Management,  Chicago 


I  have  not  seen  any  signs  that  the  market  is 
flooded.  Just  the  opposite.  People  are  saying 
there  aren’t  enough  qualified  entry-level  and 
experienced  people.  I  think  that  [a  flooded 
market]  was  true  at  the  beginning  of  the  de¬ 
cade,  when  companies  were  downsizing  and 
not  hiring  as  much.  But  I  think  we’re  past  that. 
And  because  of  the  negative  images  stirred 
up  about  the  industry  at  the  beginning  of  the 
decade,  there  are  fewer  people  entering  the 
market,  and  this  is  going  to  be  a  [labor  short¬ 
age]  problem  in  a  few  years.  There’ll  be  more 
of  a  shortfall,  and  companies  will  be  forced 
to  go  overseas  [for  contract  workers].  All  the 
buzz  about  offshore  outsourcing  is  becoming 
a  self-fulfilling  prophecy. 

Functional  area  knowledge,  such  as  in 
marketing  or  finance,  is  among  the  top  10 
skills  survey  respondents  said  they  were 
seeking  in  entry-level  hires.  Are  most 
computer  science  students  obtaining  this 
kind  of  experience?  One  of  my  concerns 
from  an  entry-level  perspective  is  that  the  kids 

Since  the  beginning  of  time  (or  so  it  don’t  get  that  at  most  universities, 
would  seem),  IT  executives  have  iden¬ 
tified  business  alignment  as  their  top  What  about  internships?  Internships  help, 

concern  in  IT  management  surveys.  And  while  absolutely.  To  me,  that’s  fundamental  to  a  suc- 

alignment  once  again  garnered  top  billing  in  cessful  program, 
the  Society  for  Information  Management’s 

recently  released  2006  study,  concerns  about  The  survey  found  that  the  average 

- l _ : _ A  _ it _ _ O  C  _ _ 


attracting,  developing  and  retaining  IT  profes¬ 
sionals  were  cited  as  the  second-biggest 
cause  of  worry  among  the  140  IT  leaders  who 
participated  in  the  annual  survey. 

Computerworld' s  Thomas  Hoffman  spoke 
with  Jerry  Luftman,  the  author  of  the  SIM 
study,  who  is  also  executive  director  of  gradu¬ 
ate  information  systems  programs  at  Stevens 
Institute  of  Technology  in  Hoboken,  N.  J. 


tenure  for  CIOs  is  3.6  years.  Any  idea 
how  this  compares  with  previous  stud¬ 
ies?  It  seems  like  their  tenure  has  lengthened 
in  recent  years.  This  year,  54%  of  the  CIOs 
were  in  their  jobs  three  years  or  less.  Last 
year,  it  was  47%.  In  the  past,  the  average 
tenure  was  18  months.  Over  the  years,  I’ve 
seen  a  steady  increase,  where  it's  been  closer 


years. 

Some  people  argue  that  there  is  no  What’s  behind  this?  I  think  - 1  hope  -  that 

shortage  of  skilled  IT  professionals  and  CIOs  are  learning  how  to  be  more  like  busi- 

that  the  market  is  flooded  with  them.  ness  executives  as  opposed  to  being  a  techni- 

Does  that  map  with  what  you’re  seeing?  cal  manager  of  geeks  in  the  basement. 


HEALTH  CARE  COSTS  AND  COVERAGE 


The  Henry  J.  Kaiser  Family  Foundation 
and  the  Health  Research  and  Educa¬ 
tional  Trust  released  their  2006  Em¬ 
ployer  Health  Benefits  Survey 

late  last  month.  Here  are  some  numbers 
gleaned  from  the  phone  survey  of  3,159  ran¬ 
domly  selected  public  and  private  employers: 

■  Premiums  for  employer-sponsored  health 
coverage  rose  an  average  of  7.7%  in 
2006.  That's  down  from  9.2%  growth 
in  2005  and  well  short  of  the  recent  peak 
of  13.9%  growth  in  2003.  But  it’s  still 
more  than  double  the  rise  in  workers’ 
wages  (3.8%)  and  overall  inflation 
(3.5%) 


■  Premiums  have  increased 

87%  since  2000. 

■  Family  health  coverage 
now  costs  an  average  of 

$11,480  annually,  with  workers  paying 
an  average  of  $2,973  toward  those  premi¬ 
ums.  That’s  about  $1,354  more  than 
in  2000 

■  The  percentage  of  small  companies 
(those  with  three  to  199  employees)  that 
offer  health  care  coverage  fell  from  85% 

in  1999  to  60%  in  2006.  Coverage 
at  companies  of  200  or  more  employees 
decreased  from  99%  to  98% 

during  that  period. 


Storage  solutions  may  require  |!ure:>a49  of  more  than  one  product  to  implement  these  capabilities  and  may  not  be  available  on  picttiredxroduct.  IBM,  the 
logo.  System  Storage,  and  T afe  Back'  Control  are  trademarks  or  registered  trademarks  of  International  Business  Machines  Corporation  in  the  United  Sti 
and/or  other  countries.  Other  tompany,  product,  and  service  names  may  be  trademarks  or  service  marks  of  others.  ©2006  IBM  Corporation.  All  rights  reset 
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.INFRASTRUCTURE  LOG 

_DAY  45:  These  underutilized  storage  boxes  have  proliferated 
exponentially.  Their  inability  to  share  capacity  has 
doomed  us.  We’re  trapped  in  a  maze  of  our  own  creation. 

_DAY  47:  I  tried  to  give  Gil  a  boost  over  this  wall,  but 
he  pulled  a  hammie. 

_DAY  48:  I’ve  taken  back  control  with  IBM  System  Storage™ 
SAN  Volume  Controller.  It  puts  my  entire  storage  universe 
into  a  simple,  virtualized  pool.  And,  unlike  EMC,  IBM  has 
fourth-generation  virtualization  technology  and  over  2,000 
customers.  I  am  seeing  results. 

.Productivity  is  up.  Utilization  is  up.  I.T.  guys  lost  in 
mazes  of  data  is  down. 


IBM.COM/TAKEBACKCONTROL/STORAGE 
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I  hope  this 
monthly  column 
will  provide  a 
lively  exchange 
of  ideas  with  IT 
managers.  I’ll  do 
my  best  to  an¬ 
swer  your  ques¬ 
tions,  and  some 
of  your  responses 
will  run  alongside 
in  “Readers  Talk  Back.” 

Please  send  your  questions, 
comments  and  critiques  to  me  at 
pgien@c2-consuiting.com. . 


We’ve  got  some  nice  documenta¬ 
tion  tools  to  help  keep  projects 
straight,  but  everyone  still  wants 
to  just  use  Word,  Excel  and  maybe 
MS  Project.  We  get  more  buy-in 
on  using  the  new  tools  from  IT’s  customers 
than  from  the  IT  project  managers.  How  do 
I  help  get  them  on  board? 

Buried  in  your  question,  you’ve  got 
a  few  interesting  assumptions  that  I 
think  we  need  to  examine  to  really  get 
to  the  heart  of  the  issue. 

First,  you’re  assuming  that  these 
robust  new  tools  that  you’ve  acquired 
are  “nice.”  We’ve  got  to  be  clear  about 
what  makes  something  a  nice  tool.  Just 
because  something  is  brand  spanking 
new  and  sports  every  option  on  the 
planet  doesn’t  necessarily  make  it  de¬ 
sirable. 

I  recently  visited  a  museum  where 
a  blacksmith  was  demonstrating  19th- 
century  manual  nail-making.  His  anvil 
and  hammer  were  far  from  shiny  and 
new,  but  he  made  impressive  nails  with 
these  old  tools.  His  tools  were  well 
suited  to  making  rough  nails  from  steel 


bar,  and  he  was  clearly  familiar  with 
them.  I  doubt  that  this  particular  black¬ 
smith  would  have  done  as  well  with  a 
computer-controlled  machine  tool.  He 
knew  hammers  and  anvils  and  liked 
them.  (Of  course,  these  tools  are  not 
very  efficient,  which  is  why  I  had  to  go 
to  a  museum  to  see  them  used.) 

What  makes  something  a  nice  tool  is 
its  suitability  to  the  job  at  hand  and  the 
user’s  familiarity  with  it.  So  it  is  with 
your  documentation  tools. 

Your  project  managers  are  probably 
resisting  because  they  don’t  consider 
the  tools  so  nice  for  these  reasons: 

1.  They  don’t  think  the  tools  are  suit¬ 
ed  to  the  job.  They  may  feel  that  the 
tools  don’t  work  at  all  or  require  too 
much  additional  work  for  the  marginal 
benefit  over  Microsoft  Office. 

2.  They  don’t  want  to  or  don’t  have 
the  time  to  learn  to  use  the  new  tools. 
They  are  not  familiar  with  them  and 
have  no  desire  to  be. 

You’re  also  assuming  that  customer 
buy-in  is  evidence  of  a  tool’s  desirabil¬ 
ity.  It’s  not.  Customers  generally  care 
only  about  results  and  not  process.  If  I 
hire  someone  to  paint  my  living  room, 

I  don’t  care  if  he  uses  brushes,  rollers 
or  finger  paints,  as  long  as  the  price 
is  good  and  the  room  looks  the  way  I 
want  it  when  I  want  it.  Your  customers 
will  probably  agree  to  almost  anything 
you  propose  that  they  believe  will  give 
them  the  results  they  want. 

And  finally,  you’re  assuming  that 
getting  the  project  managers  on  board 
is  going  to  help  them.  I  suspect  that 
they  don’t  feel  that  you’re  trying  to 
help  —  just  trying  to  cram  a  new  tool 
down  their  throats.  It  doesn’t  sound 
like  you’re  listening  to  them  or  their 
real  concerns.  Even  if  the  tools  are  fan¬ 


tastic,  they  will  resist  if  they  don’t  feel 
that  you  are  listening  to  them.  Helping 
someone  get  on  board  sounds  a  bit  too 
much  like  “making  an  offer  they  can’t 
refuse.” 

So  taking  all  this  into  account,  I’d 
suggest  the  following  approach:  Back 
off  on  the  tool,  build  consensus  on  the 
problem,  and  then  sell  the  solution.  It 
sounds  like  your  current  approach  is  to 
push  a  tool  as  a  solution  to  a  problem 
that  the  project  managers  either  can’t 
identify  or  don’t  agree  exists.  You  prob¬ 
ably  don’t  have  agreement  on  either  the 
problem  or  the  solution. 

The  staff  will  probably  be  more  will¬ 
ing  to  learn  new  things  and  adopt  new 
work  methods  if  they  recognize  the 
problems  you  are  trying  to  address, 
agree  that  these  are  problems  worthy 
of  resolving  and  accept  the  long-term 
benefits  they  will  receive  from  using 
the  new  tools.  As  it  is,  you  can  only 
hope  for  grudging  compliance  rather 
than  real  support. 

Everyone  talks  about  how  impor¬ 
tant  project  plans  are,  but  no  one 

really  says  why.  What  is  the  role 
of  the  project  plan  in  the  success 
of  a  project? 

You  ask  an  important  question.  In  gen¬ 
eral,  I  find  that  when  a  bunch  of  people 
all  agree  on  something,  they  don’t  re¬ 
ally  talk  about  why.  As  soon  as  there 
seems  to  be  a  general  consensus,  the 
discussion  stops,  and  we  assume  that 
we  all  agree  for  the  same  reasons.  Of 
course,  nothing  could  be  further  from 
the  truth. 

The  reasons  for  a  project  plan  that 
I  hear  cited  most  often  mainly  focus 
on  what  happens  when  you  don’t  have 
one: 

1.  Team  members  don’t  know  what 
to  do. 

2.  You  can’t  plan  for  effort,  duration 
or  cost. 

3.  You  won’t  know  when  you’re 
done. 

These  are  all  good  reasons  to 
have  a  plan,  but  they  all  seem  to  as¬ 
sume  one  thing  that  rarely  happens: 
The  plan  will  be  followed.  I’ve  never 
seen  any  substantial  project  that  actu¬ 
ally  followed  the  details  of  a  plan.  No 
one  knows  how  a  project  will  really 
unfold. 

To  me,  the  most  important  reason 
to  plan  a  project  is  to  grapple  with  all 
foreseeable  issues  and  approaches. 
Planning  helps  prepare  the  minds  of 
the  participants  to  clarify  the  goals  and 
the  means  for  achieving  them.  That 
way,  when  the  project  inevitably  devi¬ 
ates  from  the  original  plan,  they  will  be 
prepared  to  deal  with  reality.  * 


More  on 
Unreasonable 
Deadlines . . . 

Hi,  Pail, 

Sure,  we  could  ail  work  harder  and 
smarter  in  an  attempt  to  cut  costs 
and  time  on  projects,  but  there  is 
often  still  a  gap  between  what  the 
¥P  wants  and  what  you  think  can  be 
done.  In  my  experience,  the  VP  will 
often  say,  “Just  get  it  done.”  I  don’t 
have  a  good  answer  to  that  problem. 

Ssiu  i  S 

dan  or  infiuencer  might  help.  -  P.W, 

Great  comments!  I  think  that  the 
reader  who  originally  asked  me 
about  unreasonable  deadlines  needs 
to  develop  a  relationship  based  on 
mutual  respect  with 
the  VP  in  order  to 
be  able  to  deliver 
difficult  news.  If  one 
allows  a  supervisor 
to  give  unworkable 
orders  and  then  sim¬ 
ply  pretends  that  things  will  work 
out,  that’s  a  recipe  fora  relationship 
that  will  spiral  into  disrespect.  The 
VP  asks  for  the  unreasonable.  The 
IT  person  thinks  that  the  VP  is  an 
idiot  and  then  doesn’t  deliver.  The 
VP  then  thinks  the  IT  person  is  an 
idiot . . .  and  on  it  goes. 

Who  Won’t  Do 
Maintenance 

Hi,  Paul, 

We  know  that  98%  of  techies  would 
prefer  new  development,,  but  their 
managers  know  that  the  sharpest  of 
those  are  needed  to  “perfect”  exist- 
if!  ■;  er  :5.  /  '  '■  ha 
that  I’m  not  sure  can  be  completely 
managed  just  through  hiring  prac¬ 
tices.  -  8.H. 

Thanks  for  your  thoughtful  com¬ 
ments.  I’m  not  sure  that  I  agree  that 
new  code  is  so  much  easier  than 
maintenance.  The  challenges  are 
different.  But  you  make  a  good  point 
that  just  hiring  the  “right  people”  can 
be  hard  if  for  no  other  reason  than  or¬ 
ganizations  go  through  new  develop¬ 
ment  and  maintenance  life  cycles  just 
as  products  do.  The  balance  between 
the  need  for  inventors  and  perfectors 
is  always  shifting. 


Imagine  rubbing  elbows  with 
innovative  IT  leaders.  You  can. 


Hear  from  —  and  network  with  — 
Computerworld’s  Premier  100  IT 
Leaders  and  Alumni,  an  award¬ 
winning  set  of  IT  executives  with 
valuable  lessons  to  share,  advice 
you  can  gain,  and  relationships 
available  for  you  to  foster. 


Hewlett-Packard  Company's  Executive  Vice  President  and  CIO,  Randy  Mott 
addressing  the  2006  Premier  100  IT  Leaders  Conference 

The  eighth  annual  Premier  100  IT  Leaders 
Conference  is  a  unique  and  compelling 
departure  from  the  standard  technology 
conference.  Rather  than  focusing  on  ven¬ 
dors  and  products,  the  spotlight  is  on  great 
ideas,  strategic  use  of  best  practices  and 
real-world  leadership  from  the  IT  and  busi¬ 
ness  executives  who  are  advancing  their 
organizations  through  technology. 


Harrah’s  Entertainment,  Inc.'s  SVP  and  CIO,  Tim  Stanley 
addressing  the  2006  Premier  100  IT  Leaders  Conference 


8th  Annual 

TAn  I  COMPUTERWORLD 

Wff  I  IT  LEADERS  CONFERENCE 

March  4-6,  2007  •  JW  Marriott  Desert  Springs  Resort  •  Palm  Desert,  California 


Details  |  Agenda  |  Register 

www.premierl 00.com 


SOURCE:  SOCIETY  FOR  INFORMATION  MANAGEMENT  IT  TRENDS  SURVEY.  JUNE  2006 
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QUICK  HITS 


IT  BUDGETS 

2006  IT  Budget 
Compared  With  2005 


Equal  to  2005  r—  Less  than  2005 


Projected  2007  IT  Budget 
Compared  With  2006 


Equal  to  2005  r—  Less  than  2006 


2006 

IT  Budget  Allocations 


Internal  staff 


Outsourced  staff/domestic 

m  7.2% 

Outsourced  staff/offshore 
■  4.2% 


40.7% 


Hardware 


15% 


Software 


[  17.5% 


Network 


11.6% 


Other 
H  3.8% 


Ked2007 
Allocations 


Internal  staff 

Outsourced  staff/domestic 
1 8.4% 


Outsourced  staff/offshore 

4.8% 

Hardware 

ilia  15.3% 
Software 

BMMN16-8% 

Network 

]  12% 


Other 

m  3.7% 


Base:  139  IT  executives 


BART  PERKINS 


IT  Attitude  Check 


THE  ATTITUDE  with  which  you  approach 
a  situation  strongly  influences  how  effec¬ 
tively  you  address  it.  The  way  IT  organi¬ 
zations  think  of  (and  treat)  the  people  who 
use  their  products  and  services  has  a  sig¬ 
nificant  impact,  both  on  IT’s  effectiveness  and  on  how 
IT  is  perceived. 

Historically,  IT  organizations  have  provided  services 
to  “users,”  a  word  with  primarily  negative  connotations. 
User  rhymes  with  loser.  It  also  brings  to  mind  “being 
used.”  Even  worse,  it  calls  forth  pictures  of  the  recre¬ 
ational  drug  industry!  Simply  referring  to  “customers” 
instead  of  “users”  can  help  your  staffers  develop  a  better 
attitude  toward  the  people  they  serve. 


David  Maister’s  book 
True  Professionalism  (Free 
Press,  1997)  states,  “Profes¬ 
sionalism  is  predominantly 
an  attitude,  not  [just]  a  set 
of  competencies.  A  real 
professional  is  a  technician 
who  cares.”  A  customer 
care  mind-set  will  influ¬ 
ence  the  way  your  staff 
operates. 

Here  are  some  ways  to 
achieve  that  customer- 
oriented  attitude: 

Conduct  sufficient  market 
research.  Most  industries 
do  heavy  market  research 
before  developing  new  products.  Make 
sure  you  adequately  research  the  needs 
of  your  customers  (whether  internal  or 
external)  when  designing  or  selecting 
new  IT  products  and  services. 

Acknowledge  the  customer’s  importance. 
Without  customers,  there  is  no  need 
for  an  IT  organization.  Furthermore, 
jobs  requiring  no  customer  interaction 
are  prime  candidates  to  send  to  coun¬ 
tries  with  lower  cost  structures. 

Treat  customers  respectfully.  The  days 
when  IT  organizations  had  all  the 
technical  knowledge  and  could  simply 
dictate  terms  to  users  are  over.  Today’s 
technically  savvy  customers  expect  to 
explore  technical  issues  and  develop 
systems  jointly  with  the  IT  staff.  Antic¬ 
ipate  open  discussion,  technical  input, 


design  compromises  and 
great  ideas  —  particularly 
from  the  Web  2.0  crowd. 

Discover  the  real  problem. 
Many  customers  merely 
express  their  frustrations 
or  request  systems  that  ad¬ 
dress  the  offending  symp¬ 
toms  while  ignoring  the 
root  causes.  Successful  IT 
corporations  actively  listen 
to  their  customers  in  order 
to  discover  the  underlying 
problems.  Investigate  thor¬ 
oughly  —  ask  questions, 
clarify  issues,  and  explore 
multiple  possibilities  before 
designing  systems.  Look  beyond  the 
boundaries  of  the  customer’s  complaint. 

Set  customer  expectations  correctly  from 
the  beginning.  Be  honest  and  realistic 
about  the  effort  required,  whether  you 
are  designing  a  new  system,  fixing  a 
problem  or  preparing  a  business  case. 
Don’t  just  tell  customers  what  they 
want  to  hear,  even  when  they  persis¬ 
tently  demand  that  you  do.  (You  will 
pay  later  if  you  succumb.)  Continue  to 
manage  expectations  throughout  any 
IT  endeavor.  Keep  your  customers  well 
informed,  especially  if  for  any  reason 
costs  will  increase  or  deadlines  will 
slip.  The  closer  to  a  deadline  you  con¬ 
fess,  the  more  fallout  you  will  suffer. 
Never  surprise  a  customer  about  costs 
or  schedules. 


BART  PERKINS  is  manag 
ing  partner  at  Louisville, 


Ky.-based  Leverage  Partners 
Inc.,  which  helps  organiza¬ 
tions  invest  well  in  IT.  Contact 
him  at  BartPerkins® 
LeveragePartners.com. 


Establish  mutual  accountabiiify.  Make 
sure  significant  commitments  (on  both 
sides)  are  captured  in  writing.  Meet 
your  commitments,  and  hold  custom¬ 
ers  politely  but  firmly  accountable  for 
any  decisions  or  deliverables  to  which 
they  have  agreed. 

Decline  to  work  on  disasters.  Amply 
warn  a  customer  who  is  about  to  make 
a  genuine  mistake.  It  is  best  to  decline 
projects  when  there  is  no  feasible  way 
to  make  the  customer  happy.  Losing 
revenue  is  preferable  to  having  your 
reputation  compromised  by  dissatis¬ 
fied  customers. 

Use  customer-focused  performance  mea¬ 
surements.  Most  IT  organizations  need 
to  become  better  at  measuring  their 
own  performance  in  terms  that  are 
important  to  (and  understandable  by) 
their  customers.  At  a  minimum,  mea¬ 
sure  service  levels  and  calculate  accu¬ 
rate  unit  costs  for  each  IT  service  pro¬ 
vided  —  even  if  it  means  implementing 
cost  accounting. 

Measure  customer  satisfaction.  Perform 
regular  customer  reviews  to  discover 
any  hidden  dissatisfaction.  Ask  cus¬ 
tomers  how  well  IT  listens,  how  well 
IT  understands  their  business,  how  re¬ 
sponsive  IT  is  and  so  on.  Measure  your 
customers’  satisfaction  levels  before 
they  reach  zero.  Remember  that  what 
you  measure  is  what  you  can  manage. 
In  addition,  conduct  a  formal  customer 
satisfaction  review  at  least  annually. 
Ask  your  customers  if  they  would  buy 
your  services  again  if  they  had  a  choice. 
If  they  say  no,  work  with  them  to 
design  a  solution  before  they  investi¬ 
gate  alternatives. 

IT  organizations  exist  to  help 
customers  improve  their  business  op¬ 
erations.  Adopt  an  attitude  of  apprecia¬ 
tion,  and  start  treating  your  customers 
as  if  they  might  take  their  business 
elsewhere.  With  the  wide  choice  of  IT 
providers  and  offshore  options  cur¬ 
rently  available,  many  actually  can. 
These  days,  customer  satisfaction 
is  not  just  necessary  for  success;  it’s 
required  for  survival.  * 

WANT  OUR  OPINION? 

OFor  more  columns  and  links  to  our  archives  go  to: 

www.computerworld.com/columns 
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Instantly  Search  Terabytes  of  Text 


Contact  dtSearch  for 
fully-functional  evaluations 

The  Smart  Choice  for 
Text  Retrieval®  since  1991 


♦  over  two  dozen  indexed,  unindexed,  fielded 
data  and  full-text  search  options 


♦  highlights  hits  in  HTML,  XML  and  PDF,  while 
displaying  links,  formatting  and  [ 


images 


♦  converts  other  file  types  (database,  word 
processor,  spreadsheet,  email  and 
attachments,  ZIP,  Unicode,  etc.)  to  HTML  for 
display  with  highlighted  hits 


♦  Spider  supports  static  and  dynamic  Web 
content,  with  WYSWYG  hit-highlighting 


♦  API  supports  .NET/. NET  2.0,  C++,  Java,  SQL 
databases.  New. NET/. NET  2.0  Spider  API 

dtSearch®  Reviews 


♦  "Bottom  line:  dtSearch  manages  a  terabyte 
of  text  in  a  single  index  and  returns  results 
in  less  than  a  second"  -  InfoWorld 


♦  "For  combing  through  large  amounts 
of  data,  dtSearch  "leads  the  market" 

-  Network  Computing 

♦  "Blindingly  fast"-  Computer  Forensics: 
Incident  Response  Essentials 

♦  "Covers  all  data  sources  ...  powerful  Web- 
based  engines"  -  eWEEK 

♦  "Searches  at  blazing  speeds" 

-  Computer  Reseller  News  Test  Center 

♦  "The  most  powerful  document  search  tool 
on  the  market"-  Wired  Magazine 


For  hundreds  more  reviews  —  and 
developer  case  studies  —  see 
www.dtsea rch.com 


1-800-IT-FIISIDS  •  www.dtsearch.com 
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Get  our 
free  book. 
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E-mail  FreeBook@ITWatchDogs.com  with  your  mailing  address 
or  call  us  at  512-257-1462. 


- a  new  era  ot  voir  analysis . --- . 

You  convinced  management  to  deploy  VoIP. 
Now  ensure  that  it  will  run  smoothly. 

Rely  on  Network  Instruments'  Observer  to  help  keep 
VoIP  communications  running  at  optimal  performance. 


Learn  more. 

1-800-566-0919 

networkinstruments.com/voip 


©2006  Network  Instruments,  LLC.  All  rights  reserved.  Network  Instruments,  Observer,  and  all  associated 
logos  are  trademarks  or  registered  trademarks  of  Network  Instruments,  LLC. 


IT  Professionals 

Satyam  Computer  Services, 
Ltd.,  a  global  IT  consulting  firm 
w/HQ  in  NJ  &  branch  offices 
in  the  US  has  multiple  positions 
for  IT  professionals/Bus.  Devp. 
Mgrs.  to  serve  mult,  clients 
throughout  the  U.S.  Our  IT 
Bus.  Dev/Mktg.  Mgrs.  to 
manage  all  aspects  of  sales/bus. 
devp.  for  co's  domain  industries 
including  Banking  &  Finance, 
Automotive,  Manufacturing, 
Transport/Logistics,  Retail, 
Insurance,  to  name  a  few.  Exp. 
required  in  IT  Services, 
offshoring,  prgrm.  mgmnt, 
industry  domain  expertise 
or  business  consulting  & 
exposure  to  Business  Process 
Reengineering/six  sigma 
processes.  Exp.  must  also 
include  top-down  analysis  for 
clients  to  develop  Business 
Plans/IT  Strategies/eCommerce 
strategies,  client  mgmnt, 
management  of  system 
design/implementation  projects, 
bus.  dvlpmnt  including 
negotiation  of  contracts/pricing 
of  IT  proj.  A  master's  degree  in 
MIS,  accounting,  engineering  or 
bus.  admin/mrkting  is  preferred 
&  industry  related  exp.  as  a 
Tech.  Mktng  Mgr.  or  Sales/IT 
Mgr.  or  Management/IT 
Consultant  is  required.  A 
relevant  BS  degree  will  be  con¬ 
sidered  depending  on  exp. 
levels.  Our  IT  positions 
include  Prog/ Analysts,  DBAs, 
Sys.  Analysts,  Bus.  Sys.  Analysts, 
Ntwrk.  Eng,  Qual.  Eng, 
Sftwre.  Eng.,  Proj  Leaders  & 
Proj/Prgrm  Mgrs.  These  positions 
req.  a  BS  degree  or  higher  in  a 
related  field  and/or  relev.  industry 
exp.  in  analysis,  design, 
development  &  testing  of  comp, 
applications.  Exp.  in  .net, 
J2EE,  datawarehousing 
(Cognos/lnformatica,  Abinilio/Bus. 
Objects,  Oracle,  Siebel, 
ATG,  ERP  (Peoplesoft/SAP), 
Webmethods  and/or  a  variety  of 
other  client  server/mainframe 
skills  desired.  Some  of  our  Sr. 
level  technical/Proj.  Mgmnt. 
positions  may  require  an  MS  or 
a  BS  degree  w/significant  exp. 
All  positions  are  subject  to 
relocation  to  various  offices  & 
client  sites  throughout  the  US. 
Qualified  applicants  mail  resume 
to:  Satyam  Computer  Services, 
Ltd.,  Attn:  HR,  8500  Leesburg 
Pike,  Suite  211,  Vienna,  VA 
22182,  Ref  Job  Order  #101506. 


Infonet  Technologies  seeks  soft¬ 
ware  engineers,  system  ana¬ 
lysts/administrator  and  DBAs  to 
customize  applications  using 
Java,  Oracle,  VB.ERP.  Require 
MS/BS+exp.  Competitive  wage. 
Travel  maybe  required  Please 
apply  at  hr@infonetllc.com.  EOE. 

In-Venture  Soft  is  seeking  IT 
analyst/administrator  or  engineer 
to  design  applications  for  various 
projects.  Applicants  must  have 
MS/BS  with  solid  background  in 
Oracle,  WebSphere,  Java,  EJB, 
ASP.  We  offer  competitive  wage. 
Travel  maybe  required.  Apply  at 
resume@ivsinc.net.  EOE. 


JVR  System  seeks  S/W  engineers, 
system  analyst/administrators, 
DBA  to  customize  applications 
using  Java,  Oracle,  SAP, 
WebLogic/WebShpere,  VB,  etc. 
Travel  maybe  required.  Good  wage 
and  permanent  position.  Send 
resumes  to  38345,  W  10  Mile, 
#360,  Farmington  Hills,  48335. 

Emergtech  Business  Solutions  is 
looking  for  Computer  Professionals 
(system  analyst.  DBA,  software 
engineer).  Req  MS/BS  (equiv)+1- 
5yr  exp.  IT  experience  in  C/C++, 
Oracle,  SQL,  VB,  etc  is  a 
plus.  Travel  required  for  some 
positions.  Send  resumes  to 
hr@emergtechinc.com.  EOE 


ADP  is  searching  for  Technologies 
Consultants  -  Business  and  Financial 
Applications,  Senior  Directors  - 
Enabling  Solutions,  Technical 
Consultants  -  High  Technology  and 
Financial  Services,  Solution  Center 
Consultants  -  tax  and  financial 
consulting,  Vice  Presidents  -  Client 
Infrastructure  and  Research, 
System  Software  Engineers, 
Programmer/Analysts,  Senior 
Business  Systems  Analysts  - 
Internet  Security  Infrastructure,  and 
workers  for  various  systems  consulting 
positions  -  computerized  financial 
applications  in  Los  Angeles  (San 
Dimas,  Cerritos  area),  Roseland, 
NJ,  New  York,  Atlanta,  Oregon, 
Pleasanton,  CA  and  Atlanta 
/Alpharetta,  GA  areas.  Positions 
requiring  bachelor's  or  master's 
degree  and/or  from  1-8  years  of 
progressive  work  experience  in  the 
job  or  in  related  occupations. 
Please  send  resumes  to  ADP 
HR  by  fax  to  (212)  591-6623  or 
e-mail  Hiringlnfo@aol.com.  EOE. 


Sr.  Applications  Mgrs.  (Danze, 
Bolingbrook)  Conduct  develop¬ 
ment,  testing,  implementation, 
maintenance  and  enhance¬ 
ments  to  all  modules  of  Oracle 
ERP  for  the  support  of  multiple 
N.  American  manufacturing  and 
distribution  facilities.  B.S.  in 
Comp.  Science  or  Electronics 
Engineer.  &  5  yrs  progressive 
exp.  in  job  offd  req'd.  Will  also 
accept  M.S  in  Comp.  Science  or 
Electronics  Engineer.  &  3  yrs 
exp.  in  job  offd.  Exp.  must 
include  Java  &  Oracle  program¬ 
ming  tools;  at  least  2  full  life 
cycle  implementations  in  lead 
role  focused  on  Oracle  manu¬ 
facturing  and  dist.  operations; 
previous  mgmt.  exp.  of  technical 
staff;  &  assigning  appropriate 
tech,  to  bus.  process.  Must 
have  authorization  for 
permanent  employment  in 
U.S.  Send  resume  to  M. 
Berecek,  Globe  Union  Group,  Inc., 
2500  Internationale  Parkway 
Woodridge,  IL  60517. _ 


Business  Analyst,  Sr.  needed 
w/Masters  or  foreign  equivalent 
in  Buss.  Adm.  or  Info.  Systems 
&  1  yr.  exp.  to  analyze  the 
business  needs  of  clients  to  help 
identify  business  problems  & 
propose  solutions  of  web  based 
applications  using  Java 
technologies.  Provide  product 
development  using  Visio 
Professional  2000,  MS  Project, 
Rational  Rose,  VC  +  +  , 
Datawarehousing,  Java,  J2EE, 
Oracle,  PL/SQL,  Visual  Basic, 
SQL  Server,  ASP,  Crystal 
Reports,  BO  on  Unix  &  Windows 
platforms.  Mail  resumes  to: 
Global  Tek,  Inc.,  277  Fairfield 
Road,  Suite  #103,  Fairfield,  NJ 
07004.  Job  Loc:  Fairfield,  NJ 
or  in  any  unanticipated  locations 
in  U.S. 


Project  Manager 

Plan,  direct,  implement  and 
coordinate  SAP  projects.  Req: 
Master's  degree  in  Business 
Administration,  Accounting,  Finance, 
MIS,  Computer  Science  or  a 
closely  related  field,  1  year  exp  in 
the  job  offered  or  as  a  Sr.  SAP 
consultant/analyst,  proficiency  in 
C,  C++,  Oracle,  SAP,  Visual  Basic, 
SQL,  knowledge  of  SOX  &  FDA 
regulated  business  (eg.,  exp.  with 
validated  software  related  to  med. 
or  pharmaceutical  products)  is  plus, 
proven  exp.  in  all  aspects  of  SAP 
architecture,  functionality  &  infra¬ 
structure,  extensive  travel  on 
assignment  to  various  unanticipated 
client  sites  within  the  US.  F/T.  Send 
resumes  to:  Mallesh  Yarlagadda, 
SyTech  Consulting,  LLC,  4054 
Hooch  Trail,  Suwanee,  GA  30024. 
Ref.  Job  Code:  GASR0609. 


Tiagris  Networks,  LLC 
seeks  degreed  and  experi¬ 
enced  Global  Network 
Administrator  to  work 
in  McAllen,  Texas.  Install, 
plan,  configure,  and  main¬ 
tain  telecommunication 
equipment  for  ATM  and 
VoIP  Networks.  Fax 
resume  to  Lydia  Garza, 
Vice  President  at  956-984- 
4001.  Put  job  code  MFE- 
GNAM  on  resume. 


Computer  and 
Information  Systems 
Mgr.  w/exp  in  design 
and  development  of 
web-based  applica¬ 
tions.  Send  resume 
to  Office  Mgr,  SAIC, 
1250  Broadway,  25th 
FI.,  NY,  NY  10001. 
Must  ref  job  code 
CISM1 


Sr.  Data  Administrator.  Merge 
databases  with  Oracle,  MS  SQL 
on  Windows,  Sun  Solaris  &  Red 
Hat  Linux.  Write  data  on  Unix 
and  Windows  Platforms. 
Retrieve  data  from  other  appli¬ 
cations.  Program  using  Shell 
Scripts, C,  C++. Must  have  a 
Bachelors  Degree  in  Computer 
Engg.  Foreign  eqiv.  acceptable. 
5  years  of  exp.  as  an  I.T.  profes¬ 
sional.  2  yrs  exp.  in  Unix,  Oracle, 
Red  Hat  Linux,  Windows,  Sun 
Solaris,  C  and  C++.  Location 
PA.  Must  be  willing  to  travel. 
Submit  resume  to  HR  LN 
Infosys,  47  Marchwood  Rd., 
Suite  2A-5, Exton,  PA-19341 


Systems  Administrator 
wanted  by  CSC  in  Rochelle 
Park  NJ.  Must  have  BS  or 
MS  in  Comp.  Scie.  or  related 
fields  &  2-7  yrs  exp.  Duties: 
setup  and  admin.  Windows 
Exchange,  SQL,  media,  file 
and  Linux  servers;  design  and 
support  LAN/WAN  network 
infrastructures  incl.  switches, 
routers/access  devices; 
implement  and  enforce 
security  policies  and 
procedures  to  all  level 
int/ext  network  access. 
jobs@cschome.com 


MD/DC/NOVA.  Multiple  positions. 
Software  Configuration  Engineers 
Des  &  dev  s/wr  configuration  man¬ 
agement  applications.  Lead  &  man¬ 
age  team  of  developers.  Work 
w/ClearCase,  ClearQuest  and 
build  tools,  C#,  .NET,  VB.NET. 
Programmer  Analysts  Des  &  dev 
applns  in  Client  Server  &  Multi-tier 
envir.  Develop  multi  dimensional 
database  applns  in  Hyperion 
Essbase  using  EIS  &  VBA  api. 
Work  w/C,  C++,  .net,  C#,  Java, 
SQL,  PLSQL,  DB2  &  TOAD. 

BS  or  MS  in  InfoSys, CS, Math  or  rel 
w/1-5  yrs  exp.  Travel  req'd.  Send 
resumes  to  Vedasoft,  Inc.  608  Talon 
Ct,  Arnold, MD21012.EOE 


Are 

you 

seeking 

IT 

Talent? 


Computmvorid 
IT  Careers 
provides 
recruitment 
management 
and  branding 
resources  that 
position  your 
company  in  front 
of  in-demand 
professionals 
who  are 
prospective 
candidates 
for  your 
IT  positions. 


Find  out  how 
you  can  reach 
over  1,200,000 
IT  professionals. 


Call  today  for 
details! 
800-762-2977 


COMPirTERWORLI 

IT  CAREERS 


ATTENTION: 

Law  Firms 

IT  Consultants 
Staffing  Agencies 


Are  you  frequently 
placing  legal 
or  immigration 
advertisements? 

Let  us  help  you 
create  a  cost-effective 
program  that  will  make 
this  time-consuming 
task  a  little  easier. 


iT|careers 

COMPUTERWORLD 

Contact  us  at: 

800.762.2977 


Computerworld  -  October  23,  2006 


www.computerworld.com 


COMPUTERWORLD  October  23, 2008  53 


COMPUTERWORLD 

COMPUTERWORLD  SALES  OFFICES 

ADVERTISER’S  INDEX 

AT&T . 

HEADQUARTERS 

nii^. _ _ 

www.att.com 

CA 

One  Speen  Street,  P.O.  Box  9171 
Framingham,  MA  01701-9171 
Phone:  (508)  879-0700 
Fax:  (508)  875-4394 

PRESIDENT/PUBLISHER/CEO 

Matthew  J.  Sweeney 
(508)271-7100 

EXECUTIVE  ASSISTANT  TO  CEO/ 
CORPORATE  COMMUNICATIONS  MANAGER 

Laureen  Austermann 
(508)820-8522 


VICE  PRESIDENT/ 
GENERAL  MANAGER  ONLINE 

Martha  Connors(508)  620-7700 

VICE  PRESIDENT/MARKETING 

Matt  Duffy 
(508)820-8145 

VICE  PRESIDENT/ 
CUSTOM  CONTENT 

Bill  Laberis 
(508)  820-8669 

VICE  PRESIDENT/ 

HUMAN  RESOURCES 

Julie  Lynch 
(508)820-8162 

EXECUTIVE  VICE  PRESIDENT/ 
STRATEGIC  PROGRAMS 

Ronald  L.  Milton 
(508)820-8661 

VICE  PRESIDENT/ONLINE  SALES 

Gregg  Pinsky 
(508)271-8013 

EXECUTIVE  VICE  PRESIDENT/COO 

Matthew  C.  Smith 
(508)  820-8102 

VICE  PRESIDENT/ 

EDITOR  IN  CHIEF 

Don  Tennant 
(508)620-7714 

VICE  PRESIDENT/CIRCULATION 

Debbie  Winders 
(508)820-8193 


PRESIDENT/PUBLISHER/CEO 

Matthew  J.  Sweeney 
(508)271-7100 
Fax:  (508)270-3882 

SALES  INTEGRATION  DIRECTOR 

Laurie  Marinone 
(508)628-4823 
Fax:  (508)  270-3882 


1  NORTHWESTERN  STATES 

1 

CENTRAL  STATES 

ACCOUNT  DIRECTOR:  Jim  Barrett  (415)  978-3306, 
ACCOUNT  EXECUTIVE:  Chris  Da  Rosa  (415)  978-3304. 

501  Second  Street,  Suite  114,  San  Francisco.  CA  94107, 

Fax:  (415)  543-8010 

ACCOUNT  DIRECTOR:  Bill  Hanck  (949)  442-4006: 
ACCOUNT  EXECUTIVE:  Jean  Dellarobba  (949)  442- 
4053, 19200  Von  Karman  Avenue.  Suite  360,  Irvine.  CA 
92612,  Fax:  (949)  476-8724 

[  BAY  AREA 

1  1 

NEW  ENGLAND  STATES 

ACCOUNT  DIRECTORS:  Jim  Barrett  (415)  978-3306. 
Sara  Culley  (415)  978-3307:  ACCOUNT  EXECUTIVES: 
Chris  Da  Rosa  (415)  978-3304.  Emmie  Hung  (415)  978- 
3308,  501  Second  Street.  Suite  114,  San  Francisco,  CA 
94107,  Fax:  (415)  543-8010 


SOUTHWESTERN  STATES 


ACCOUNT  DIRECTOR:  Bill  Hanck  (949)  442-4006: 
ACCOUNT  EXECUTIVE:  Jean  Dellarobba  (949)  442- 
4053, 19200  Von  Karman  Avenue.  Suite  360.  Irvine.  CA 


ACCOUNT  MANAGER:  Deborah  Cummings  (508)  271- 
7110:  SALES  ASSOCIATE:  Jess  Roman  (508)  271-7108. 
One  Speen  Street.  Framingham,  MA  01701.  Fax:  (508) 
270-3882 


METRO  NEW  YORK 


ACCOUNT  DIRECTOR:  Peter  Mayer  (201)  634-2324: 
ACCOUNT  EXECUTIVE:  John  Radzniak  (201)  634-2323. 
650  From  Road  -  2nd  Floor,  Paramus.  NJ  07652.  Fax: 
(201)  634-9289 


..17 

www.ca.com 

Canon . 28-29 

www.usa.canon.com/isg/whatsnextforcolor 

Dell . 33 

www.dell.com 

dtSearch . 51 

www.dtsearch.com 

EMC . 9* 

www.emcinsignia.com 

Hewlett-Packard  BladeSystem . 14-15 

www.hp.com 

Hewlett-Packard  ProCurve . 7 

www.hp.com 

IBM  Cross  Server . 2-3,  24-25,  46-47, 

. 56-57 

www.ibm.com 

Intel . 19 

www.itanium-integrity.com 

Internet  Security  Systems . 35 

www.iss.net 

InterSystems  Ensemble . 27 

www.intersystems.com 

IT  Executive  Summit 

Application  Performance . 39,  43 

www.itexecutivesummit.com 

IT  WatchDogs  Inc . 51 

www.itwatchdogs.com 

Mercury . 21 

www.mercury.com/qa/cw 

Microsoft  Linux . 10-11 

microsoft.com/getthefacts 

Network  Instruments . 51 

networkinstruments.com/voip 

Oracle . 60 

www.oracle.com 

Polycom . 31 

www.polycom.com 

Premier  100  IT  Leaders  Conference 

Palm  Desert,  CA . 49 

www.premier100.com 

Robert  Half . 40 

www.rht.com 

SAS . 5 

www.sas.com 


CIRCULATION 

Sr.  Circulation  Specialist/Diana  Turco.  (508)  820-8167 

PRODUCTION 

Vice  President  Production/Carolyn  Medeiros:  Production  Manag¬ 
er/Kim  Pennett:  Print  Display  Advertising:  (508)  820-8232,  Fax: 
(508)  879-0446:  DISTRIBUTION:  Director  of  Distribution  and 
Postal  Atfairs/Bob  Wescott 

STRATEGIC  PROGRAMS  AND  EVENTS 

Vice  President  Strategic  Initiatives/Leo  Leger:  Vice  President  Busi¬ 
ness  Development/John  Amato;  Senior  Director,  Event  Sponsorship 
Sales/Ann  Harris;  Vice  President,  Event  Marketing  and  Conference 
Programs/Derek  Hulitzky:  Director.  Event  Management/Michael 
Meleedy;  Program  Director.  Computerworld  Honors/Sandy  Weill; 
Business  Development  Specialist/Colin  Longval:  Business  Develop¬ 
ment  Specialist/Chris  Leger;  Business  Development  Specialist/Amy 
McLellan;  Marketing  Manager/Timothy  Johnson;  Conference  Manag¬ 
er/Nancy  Felsheim:  Sr.  Marketing  Specialist/Duncan  Newell:  Execu¬ 
tive  Programs  Manager-Computerworld  Honors/Deborah  Lee;  Exec¬ 
utive  Programs  Manager-Executive  Assistant/  Kelly  McGill;  Custom 
Events  Specialist/Jean  Lee:  Operations  Specialist/Chris  Johnson; 
Web  Development  Specialist/Michelle  Remeny:  Customer  Service 
Coordinator/Josh  RyamAudience  Development  Coordinator/Shari 
Ebb,  One  Speen  Street,  Box  9171.  Framingham.  MA  01701-9171. 
(508)  879-0700,  Fax:  (508)  626-8524 

ONLINE  ADVERTISING 

Director  of  Online  Sales/Sean  Weglage.  (415)  978-3314.  Fax:  (415) 
543-8010:  Online  Sales  Manager.  East  Coast/James  Kalbach.  (610) 
971-1588;  Online  Account  Executive/April  Hughes.  (415)  978-3311. 
Fax:  (415)  543-8010;  Online  Account  Executive/Matthew  Wintringham, 
(508)  270-3882,  Fax:  (508)  270-3882;  Account  Services  Director/Bill 
Rigby,  (508)  820-8111,  Fax:  (508)  270-3882:  Online  Account  Execu¬ 
tive/Kathryn  Goryl,  (508)  620-7760.  Fax:  (508)  270-3882;  Online  Ac¬ 
count  Services  Specialist/Stacey  Buchanan:  Online  Account  Services 
Specialist/Heidi  Squires;  Online  Sales  Assistant/Joan  Olson  (508)  270- 
7112;  One  Speen  Street.  Box  9171,  Framingham.  MA  01701-9171,  Fax: 
(508)270-3882 

IT  CAREERS  ADVERTISING  SALES  OFFICE 

Director  of  Sales/Laura  Wilkinson.  (847)  441-8877,  Fax:  (847) 
441-8878;  One  Speen  Street,  Framingham,  MA  01701 

LIST  RENTAL 

POSTAL:  Rich  Green.  (508)  370-0832.  e-mail:  rgreen 
@idglist.com.  E-Mail:  Christine  Cahill,  (508)  370-0808, 
e-mail:  ccahill@idglist.com.  MAILING  ADDRESS:  IDG  List  Ser¬ 
vices,  P.O.  Box  9151,  Framingham,  MA  01701-9151.  Fax:  (508) 
370-0020 


92612,  Fax:  (949)  476-8724 


EASTERN  CENTRAL  STATES/  INDIANA 


ACCOUNT  DIRECTOR:  Peter  Mayer  (201)  634-2324: 
ACCOUNT  EXECUTIVE:  John  Radzniak  (201)  634-2323. 
650  From  Road  -  2nd  Floor,  Paramus,  NJ  07652.  Fax: 
(201)  634-9289 


SOUTHEASTERN  STATES 


ACCOUNT  DIRECTOR:  Lisa  Ladle-Wallace  (904)  284-4972, 
5242  River  Park  Villas  Dr.,  St.  Augustine,  FL  32092,  Fax: 
(800)  779-8622;  SALES  ASSOCIATE:  Jess  Roman  (508) 
271-7108,  One  Speen  Street,  Framingham.  MA  01701,  Fax: 
(508)  270-3882 


Storage  Networking  World 
Best  Practices  in  Storage 

Awards  Program . 59 

www.snwusa.com 

‘Regional  Select  Edition 

This  index  is  provided  as  an  additional  service.  The  publisher 
does  not  assume  any  liability  lor  errors  or  omissions. 


INTERNATIONAL 
DATA  GROUP 

CHAIRMAN  OF  THE  BOARD 

Patrick  J.  McGovern 


PRESIDENT.  IDG  COMMUNICATIONS 

Bob  Carrigan 


COMPUTERWORLD  is  a  business  unit  of  IDG,  the 
world's  leading  technology  media,  research  and  event 
company.  IDG  publishes  more  than  300  magazines 
and  newspapers  and  offers  online  users  the  largest 
network  of  technology-specific  sites  around  the  world 
through  IDG.net  (www.idg.net).  which  comprises  more 
than  330  targeted  Web  sites  in  80  countries.  IDG  is 
also  a  leading  producer  of  168  computer-related  events 
worldwide,  and  IDG's  research  company,  IDC.  provides 
global  market  intelligence  and  advice  through  51 
offices  in  43  countries.  Company  Information  is 
available  at  www.idg.com. 

*IDG 


Have  a  problem  with  your  Computerworld  subscription? 

We  want  to  solve  it  to  your  complete  satisfaction,  and  we  want  to  do  it  fast. 

Please  write  to:  Computerworld,  P.O.  Box  3500,  Northbrook,  IL  60065-3500. 

Your  magazine  subscription  label  is  a  valuable  source  of  information  for  you  and  us.  You  can  help  us  by 
attaching  your  magazine  label  here,  or  copy  your  name,  address,  and  coded  line  as  it  appears  on  your 
label.  Send  this  along  with  your  correspondence. 

ADDRESS  CHANGES  OR  OTHER  CHANGES  TO  YOUR  SUBSCRIPTION 

All  address  changes,  title  changes,  etc.  should  be  accompanied  by  your  address  label,  if 
possible,  or  by  a  copy  of  the  information  that  appears  on  the  label,  including  the  coded  line. 

YOUR  NEW  ADDRESS  GOES  HERE:  I  ADDRESS  SHOWN:  □  Home  □  Business 


NAME 


TITLE  COMPANY 


ADDRESS 


CITY  STATE  ZIP 

OTHER  QUESTIONS  AND  PROBLEMS 

It  is  better  to  write  us  concerning  your  problem  and  include  the  magazine  label.  Also,  address  changes 
are  handled  more  efficiently  by  mail.  However,  should  you  need  to  reach  us  quickly,  the  following  toll-free 
number  is  available  (888)  559-7327  Outside  U.S.  call  (847)  559-7322. 

Internet  address:  cw@omeda.com 

COMPUTERWORLD  allows  advertisers  and  other  companies  to  use  its  mailing  list  for  selected  offers  we  feel  would  be 
of  interest  to  you.  We  screen  these  offers  carefully.  If  you  do  not  want  to  remain  on  the  promotion  list  please  write  to  the  fol¬ 
lowing  address  -  COMPUTERWORLD,  Circulation  Department.  One  Speen  Street,  Framingham,  MA  01701. 


§4  COMPUTERWORLD  October  23, 2006 


RESOURCES 


www.computerworld.com 


mw  to  canuT 

COMPUTERWOMD 

We  invite  readers  to  call  or  write  with  their  comments 
and  ideas.  It  is  best  to  submit  ideas  to  one  ot  the 
department  editors  and  the  appropriate  beat  reporter. 


Don  Tennant 

Editor  in  chief 

(508)620-7714 

Mitch  Betts 

Executive  editor 

(301)262-8243 

Julia  King 

Executive  editor,  events 

(610)532-7599 

DEPARTMENT  EDITORS 

Craig  Stedman 

News  editor 

(508)820-8120 

Mike  Bucken 

Assistant  News  editor 

(508)820-8562 

Kathleen  Melymuka 

Management  editor 

(508)820-8118 

REPORTERS 

Sharon  Fisher 

Storage;  disaster  recovery 
and  business  continuity 

(208)  922-5833 

Matt  Hamblen  (508)820-8567 

Networking;  mobile/wireless; 
network/systems  management 


Heather  Havenstein  (919)  386-0381 
Business  intelligence;  application  development; 


Web  services;  application  server  software; 
health  care  industry 


Eric  Lai  (425)367-4359 

Windows,  Linux,  desktop  applications, 
databases,  financial  services  industry 


Linda  Rosencrance  (508)  628-4734 
General  assignment;  transportation  and 
automotive  industries 


Carol  Sliwa  (508)  628-4731 

National  correspondent 


Marc  L.  Songini  (508)  820-8182 

ERP,  supply  chain  and  CRM  applications; 

RFID;  e-voting;  retail,  food  and  agribusiness 
industries 


Patrick  Thibodeau  (202)333-2448 
Enterprise  systems;  Unix;  outsourcing  and 
immigration;  antitrust  issues 


Jaikumar  Vijayan  (630)  978-8390 
Corporate  security/privacy  issues; 
related  legislation  and  regulations 


Todd  R.  Weiss  (717)560-5255 

General  assignment;  open-source 
community;  intellectual  property; 
messaging/collaboration 


FEATURES 

Ellen  Fanning 

Special  projects  editor 

(508)820-8204 

Thomas  Hoffman 

National  correspondent 

(845)  988-9630 

Robert  L.  Mitchell 

National  correspondent 

(508)820-8177 

Mark  Hall 

Editor  at  large 

(503)391-1158 

Gary  Anthes 

National  correspondent 

(703)536-9233 

Julia  King 

National  correspondent 

(610)532-7599 

OPINIONS 

Frank  Hayes 

Senior  news  columnist 

(503)252-0100 

C0MPUTERW0RLD.COM 

Scot  Finnie 

Online  editorial  director 

(508)628-4868 

Ian  Lamont 

Senior  online  projects  editor 

(508)820-8187 

Joyce  Carpenter 

Online  projects  editor 

(508)820-8161 

Sharon  Machlis 

Managing  editor/online 

(508)820-8231 

Ken  Mingis 

Online  news  editor 

(508)820-8545 

Marian  Prokop 

(508)620-7717 

Online  editor  at  large/Networking  channel  editor 

David  Ramel 

(508)820-8269 

E-mail  newsletters/Networking  channel  editor 

Lucas  Mearian 

Storage  channel  editor 

(508)820-8215 

Angela  Gunn 

Security  channel  editor 

(206)  388-2508 

Valerie  Potter  (828)350-8518 

Online  how-to  and  reviews  editor 


RESEARCH 

Mari  Keefe 

Research  manager 


Gussie  Wilson 

Research  associate 

COPY  DESK 

Michele  Lee  DeFilippo 

Managing  editor/production 

(508)  820-8126 

Bob  Rawson 

(508)271-8015 

Assistant  managing  editor/production 

Eugene  Demattre,  Monica  Sambataro 

Senior  copy  editors 

Carla  Dempsey,  Donna  Sussman 

Copy  editors 

GRAPHIC  DESIGN 

Stephanie  Faucher 

(508)820-8235 

Design  director 

April  O’Connor 

Art  director 

Owen  Edwards 

Associate  art  director 

ADMINISTRATIVE  SUPPORT 

Linda  Gorgone 

(508)820-8176 

Office  manager 

CONTRIBUTING  EDITOR 

Jamie  Eckle 

(617)596-1873 

Opinions 

CONTRIBUTING  COLUMNISTS 
Michael  Gartenberg,  Paul  Glen, 
Barbara  Gomolski,  John  Halamka, 
Thornton  A.  May,  David  Moschella, 
Bart  Perkins,  Virginia  Robbins, 
Bruce  A.  Stewart 


CONTRIBUTING  WRITERS 

Mary  Brandel,  Stacy  Collett, 

Russell  Kay,  Mary  K.  Pratt,  Drew  Robb 


TELEPHONE/FAX 

Main  phone  number  (508)  879-0700 

All  editors  unless  otherwise  noted  below 


Main  fax  number 

(508)875-8931 

24-hour  news  tip  line 

(508)620-7716 

E-MAIL 

■  Our  Web  address  is 
www.computerworld.com. 

■  Staff  members'  e-mail  follows  this  form: 
firstnameJastname@computerworld.com. 

■  For  IDG  News  Service  correspondents: 
ftrstnamejastname@idg.com. 


LETTERS  TO  THE  EDITOR 

Letters  to  the  editor  are  welcome 
and  should  be  sent  to:  letters@computer- 
world.com.  Include  your  address  and 
telephone  number. 


MAIL  ADDRESS 

PO  Box  9171, 1  Speen  Street, 
Framingham,  Mass.  01701 


SUBSCRIPTIONS/BACK  ISSUES 

Subscription  rates: 

■  U.S.,$99.99/year 

■  Canada,  $130/year 

■  Central  and  South  America,  $250/year 

■  All  others,  $295/year 


Phone 

(888)559-7327 

E-mail 

cw@omeda.com 

Back  issues 

(888)559-7327 

REPRINTS/PERMISSIONS 


Contact 

ErikEberz 

Phone 

(717)  399-1900,  ext.  150 

E-mail  computerworld@reprintbuyer.com 
Visit  www.reprintbuyer.com  to  obtain 
quotes  and  order  reprints  online. 


COMPANIES  IN  THIS  ISSUE 

Page  number  refers  to  page  or  which  story  begins.  Company  names  can  also  be 

searched  at  www.computerworld.com 


ACCENTURE  LTD . 18 

ACTIVIDENTITYINC . 55 

ACTUATE  CORP . 20 

ADVANCED  MICRO 

DEVICES  INC . 23.  30 

ALASKA 

DEMOCRATIC  PARTY . 13 

ALTUS  LEARNING 

SYSTEMS  INC . 8 

AMBERPOINT  INC  . .  . 8 

AMERICAN  ELECTRONICS 

ASSOCIATION . 45 

AT&T  INC . 12 

AVAYA  INC . 20 

BETH  MELSKY 

SATELLITE  CASTING . 55 

BL'JECROSS  BLUESHIELD 

Of-  I ENNESSEE  INC . 6 

BROADWING  CORP .  12 

.BUSINESS  OBJECTS  SA . 20.  32 

CALIFORNIA  INDEPENDENT 

SYSTEM  OPERATOR . 20 

CARDINAL  HEALTH  INC . 42 

CAREGROUP  HEALTHCARE 

SYSTEM . 23 

CARNEGIE  MELLON 

UNIVERSITY . 13 

CASE  DESIGN/ 

REMODELING  INC . 26 

CIA . 18 


CISCO  SYSTEMS  INC . 20.  34. 

. 45.  55 

CLEARFOREST  CORP. . 6 

COLORADO  DEMOCRATIC 

PARTY . 12 

COMPUTER  SCIENCE 
AND  TELECOMMUNICATIONS 

BOARD . 38 

CONGRESSIONAL 

BUDGET  OFFICE . 34 

CUTTER  CONSORTIUM . 42 

DATALINKCORP. . 16 

DECARTA  INC . 8 

DIEBOLD  ELECTION 

SYSTEMS . 13.  38 

DREAMWORKS 

ANIMATION  LLC . 55 

ELECTION  DATA 

SERVICES  INC . 12,13 

ELECTION 

SCIENCE  INSTITUTE . 38 

ELECTION  SYSTEMS  & 

SOFTWARE  INC . 13 

ELECTRONIC  DATA 

SYSTEMS  CORP . 6,18 

EMACHINES  INC . 18 

EMC  CORP . 6,16 

EUROPEAN  COMMISSION . 18 

EUROPEAN  COURT 

OF  JUSTICE . 18 


EUROPEAN  UNITED  LEFT/ 

NORDIC  GREEN  LEFT . 18 

EVESHAM  TECHNOLOGY  LTD . 18 

EXPERIAN  GROUP  LTD . 6 

EXTREME  NETWORKS  INC . 20 

F5  NETWORKS  INC . 8 

FORRESTER  RESEARCH  INC . 6 

GARTNER  INC . 20,  26,  36 

GATE5  AG . 18 

HARVARD  CLINICAL 

RESEARCH  INSTITUTE . 23 

HARVARD  MEDICAL  SCHOOL . 23 

HEALTH  RESEARCH 

AND  EDUCATIONAL  TRUST . 45 

HENRY  J.  KAISER 

FAMILY  FOUNDATION . 45 

HEWLETT-PACKARD  CO.  . . .  8.  22.  55 

HYPERICINC . 38 

HYPERION 

SOLUTIONS  CORP. . 32.  36 

IBM . 6,12.18.30.58 

IDC . 30.  32 

IMPERVAINC . 16 

INFORMATION  SOCIETY  AND 
MEDIA  DIRECTORATE 

GENERAL . 18 

INFOSYS  TECHNOLOGIES  LTD . 18 

INGRES  CORP. . 18 

IN-STAT . 18 

INSURANCE AUTO 

AUCTIONS  INC . 30 

INTEL  CORP . 8,23.30 

INTERNATIONAL  ORACLE 

USERS  GROUP . 16 

INTERNET  SECURITY 

SYSTEMS  INC . 12 

IONA  TECHNOLOGIES  PLC . 8 

JACKBECORP. . 8 


JACOB  &SUNDSTROM  INC . 55 

JOHNS  HOPKINS  UNIVERSITY . 12 

JUNIPER  NETWORKS  INC . 38 

KENNESAW  STATE 

UNIVERSITY . 13 

KNOWLEDGESTORM  INC . 58 

LEVEL 3 

COMMUNICATIONS  INC . 12 

LIBERTY  MEDICAL 

SUPPLY  INC . 16 

MCAFEE  INC . 8 

MCKINSEY  &  CO . 18 

MERCURY  INTERACTIVE  CORP. . 8 

MICROSOFT  CORP . 6.  8, 18.  20, 

.  26,30,34,38,45.48 

MITSUBISHI  ELECTRIC  & 

ELECTRONICS  U.S.A.  INC . 18 

MITSUBISHI  ELECTRIC  CORP . 18 

MPHASIS  BFL  LTD . 6 

NASDAQ  STOCK  MARKET  INC . 20 

NATIONAL  ASSOCIATION 

OF  SECRETARIES  OF  STATE . 13 

NATIONAL  ASSOCIATION 
OF  SOFTWARE  AND 

SERVICE  COMPANIES . 18 

NATIONAL  PUBLIC  RADIO  INC . 30 

NATIONAL 

RESEARCH  COUNCIL . 38 

NCR  CORP . 22 

NEC  CORP . 18 

NEW  ENGLAND  HEALTH 
ELECTRONIC  DATA 

INTERCHANGE  NETWORK . 23 

NEW  YORK  YANKEES 

PARTNERSHIP . 44 

NEXT  GENERATION 

SECURITY  SOFTWARE  LTD . 16 

NOKIA  CORP. . 18 


NORTEL  NETWORKS  LTD . 45 

NOVELL  INC . 30,45 

NUCLEUS  RESEARCH  INC . 58 

NUMARA  SOFTWARE  INC . 38 

OBERTHURCARD 

SYSTEMS  SA . 55 

ONIGMALTD . 8 

ORACLE  CORP. . 16,45 

OSCIENT 

PHARMACEUTICALS  CORP. . 30 

PACKARD  BELL  BV . 18 

PERKINELMER  INC . 26 

POLYCOM  INC . 55 

PRINCETON  UNIVERSITY . 34 

RED  HAT  INC . 30 

REGIONS  FINANCIAL  CORP. . 41 

ROBERT  HALF  TECHNOLOGY . 45 

SAP  AG . 6,  32 

SIEMENS  AG . 18 

SIEMENS  BUSINESS 

SERVICES . 18 

SOCIETY  FOR  INFORMATION 

MANAGEMENT . 45 

STEVENS  INSTITUTE 

OF  TECHNOLOGY . 45 

SUN  MICROSYSTEMS  INC . 20 

SUSE  LINUX  AG . 30 

TATA  CONSULTANCY 

SERVICES  LTD . 18 

TDAMERITRADE . 42 

THE  TIMKEN  CO . 32 

TRANQUIL  PC  LTD . 18 

TRIMBLE  NAVIGATION  LTD . 18 

TUSC . 16 

U.S.  DEPARTMENT 

OF  AGRICULTURE . 55 

U.S.  DEPARTMENT 

OF  HOMELAND  SECURITY . 55 


U.S.  DEPARTMENT  OF  HOUSING 
AND  URBAN  DEVELOPMENT. .....  55 

U.S.  DEPARTMENT 

OF  JUSTICE . 12,18 

U.S.  ELECTION  ASSISTANCE 

COMMISSION . 38 

U.S.  ENVIRONMENTAL 

PROTECTION  AGENCY . 1 

U.S.  GENERAL  SERVICES 

ADMINISTRATION . 55 

U.S.  SECURITIES  AND 

EXCHANGE  COMMISSION . 18 

U.S.  SOCIAL  SECURITY 

ADMINISTRATION . 1 

UNIPRESS  SOFTWARE  INC . 38 

UNIVERSITY  OF  IOWA . 13 

VIA  TECHNOLOGIES  INC . 18 

VMWARE  INC .  8, 23, 26, 30 

WHITE  HOUSE  OFFICE 
OF  MANAGEMENT 

AND  BUDGET . 55 

WIPRO  LTD . 18 

XENSOURCEINC . 8,30 

YAHOO  INC  . . . . 22,  34 

YANKEE GROUP 

RESEARCH  INC . 55 

ZEUS  TECHNOLOGY  LTD . 8 


www.computerworld.com 


Cisco  Pushes  its  Way  Into 
Videoconferencing  Market 


BY  MATT  HAMBLEN 

In  its  first  foray  into  the 
videoconferencing  market, 
Cisco  Systems  Inc.  today  will 
announce  two  so-called  tele¬ 
presence  systems  that  it  said 
are  capable  of  supporting 
conference-room-size  areas. 

Meanwhile,  Pleasanton, 
Calif.-based  Polycom  Inc.  will 
introduce  a  line  of  three  high- 
definition  videoconferencing 
systems  designed  to  support 
telemedicine,  education  and 
other  applications. 

Polycom’s  new  HDX  9000 
series  ranges  in  price  from 
$13,999  to  $19,999,  plus  $4,999 
for  an  HD  camera.  Those  costs 
are  a  fraction  of  the  list  pric¬ 
ing  of  $79,000  to  $299,000  that 
Cisco  has  set  for  the  Telepres¬ 
ence  1000  and  Telepresence 
3000,  the  two  videoconferenc¬ 
ing  systems  it  is  rolling  out. 

The  High-End  Path 

But  Randy  Harrell,  direc¬ 
tor  of  Telepresence  product 
marketing,  said  Cisco  believes 
its  technology  will  provide 
higher-quality  performance 
than  traditional  room-based 
teleconferencing  equipment 
does.  Cisco  claims  that  its  vid¬ 
eo  screen  resolution  is  l,080p 
in  a  progressive-scan  format, 
about  four  times  the  quality  of 
a  standard  interlaced  TV  and 
higher  than  the  720p  resolu¬ 
tion  supported  by  Polycom’s 
new  products. 

Cisco  built  all  of  its  video- 
conferencing  components 
in-house,  including  an  echo¬ 
canceling  microphone,  an  HD 
camera,  a  plasma  screen  video 
display  and  a  coder/decoder 
device  that  translates  analog 
signals  to  digital  ones  and 
back  again. 

Harrell  said  it  would  cost 
about  $250,000  to  set  up  a 
conference  room  capable  of 
handling  virtual  meetings  for 
a  dozen  people.  That  price 
includes  a  three-display  Tele- 
Presence  3000  system  and  a 


year  of  maintenance  from  Cisco. 

Morgan  Fisher,  co-owner  of 
Beth  Melsky  Satellite  Casting 
in  New  York,  has  been  running 
a  beta-test  version  of  a  Poly¬ 
com  HDX  9000  for  six  weeks 
in  conferencing  studios  in  New 
York,  Los  Angeles,  Miami  and 
Chicago  that  advertising  agen¬ 
cies  and  directors  of  television 
commercials  use  to  cast  actors. 

Fisher  said  he  is  impressed 
by  both  the  video  and  audio 
capabilities  of  the  new  tech¬ 
nology.  “I  noticed  a  big  dif- 


Continued  from  page  1 

Smart  IDs 

dined  to  provide  more  details. 

Matt  Neuman,  director  of 
business  development  at  Jacob 
&  Sundstrom  Inc.,  a  Baltimore- 
based  systems  integrator  that 
is  helping  the  SSA  with  its 
smart-card  implementation, 
said  that  many  agencies  ap¬ 
pear  to  be  ready  to  meet  “the 
letter  of  the  law,  if  not  the 
spirit  of  the  law”  on  issuing 
the  PIV  cards.  “But  it  at  least 
shows  that  everybody  is  fo¬ 
cused  on  it,”  he  said. 

The  use  of  PIV  cards  for 
verifying  the  identities  of  all 
federal  workers  and  contrac¬ 
tors  was  mandated  by  Home¬ 
land  Security  Presidential 
Directive  12.  The  unfunded 
HSPD-12  mandate  specified 
that  agencies  must  adopt  a 
common  identification  cre¬ 
dential  for  access  to  govern¬ 
ment  facilities  and  computer 
systems. 

Friday’s  deadline  and  an 
earlier  one  calling  on  agen¬ 
cies  to  develop  procedures  for 
verifying  the  identities  and 
backgrounds  of  all  workers  by 
last  October  were  both  consid¬ 
ered  exceptionally  aggressive 
because  of  funding  issues  and 
the  technology  and  process 
changes  required. 

Robert  Langston,  director 


ference  with  the  HD,”  he  said. 
‘It’s  so  much  better  than  any¬ 
thing  I’ve  ever  heard.” 

Directors  have  told  Fisher 
they  can  spot  more  subtle  dif¬ 
ferences  between  actors  with 
the  HD  system.  “If  you  sit  in 
a  room  and  have  a  five-hour 
conversation  but  the  lighting 
and  acoustics  are  bad  and  you 


of  the  office  of  security  and 
emergency  planning  at  the 
Department  of  Housing  and 
Urban  Development,  said  last 
week  that  HUD  hopes  to  begin 
producing  fully  functional  PIV 
cards  by  Wednesday  “and  then 
continue  to  do  so  for  all  new 
employees  and  contractors 
from  that  point  forward.” 

Initially,  the  cards  will  be 
issued  to  HUD’s  headquarters 
staffers  via  recently  procured 
identity  management  and 


Major  milestones  on 
Homeland  Security 
Presidential  Directive  12 

AUG.  27, 2004:  President 
Bush  signs  a  directive  mandat¬ 
ing  a  standard  approach  to  au¬ 
thenticating  federal  employees 
and  contractors. 

JUNE  27, 2005:  Federal 
agencies  must  submit  HSPD-12 
compliance  plans  to  the  White 
House  Office  of  Management 
and  Budget. 

OCT.  27, 2005:  Agencies 
are  required  to  implement 
new  processes  for  verifying 
the  identities  of  workers  and 
checking  their  backgrounds. 

OCT.  27, 2006:  All  agencies 
must  start  issuing  personal 
identity  verification,  or  PIV, 
cards  to  control  access  to 
buildings  and  IT  systems. 


hear  noise  in  the  background, 
it  taps  the  senses,”  he  said. 
“The  same  is  true  for  video- 
conferencing  if  the  screen  and 
sound  are  not  that  crisp.  Your 
brain  tries  to  fill  in  the  gaps, 
which  can  be  very  tiring.” 

Zeus  Kerravala,  an  analyst 
at  Yankee  Group  Research  Inc. 
in  Boston,  said  he  went  into  a 


card  management  systems, 
Langston  said.  He  added  that 
“a  small  number”  of  HUD  field 
staffers  who  work  in  Wash¬ 
ington,  New  York,  Atlanta  and 
Seattle  will  be  sent  to  shared 
HSPD-12  enrollment  centers 
that  have  been  set  up  in  those 
cities  by  the  U.S.  General  Ser¬ 
vices  Administration. 

The  enrollment  centers 
include  systems  that  can  be 
used  to  verify  the  identities 
of  employees,  fingerprint 
and  photograph  the  workers, 
and  issue  PIV  cards  to  them. 
Eventually,  as  many  of  HUD’s 
81  field  offices  as  possible  will 
take  advantage  of  the  centers 
as  more  are  deployed  across 
the  country,  Langston  said. 

The  strategy  should  help 
HUD  save  “a  lot  of  money”  on 
its  PIV  enrollment  and  card- 
distribution  costs,  according 
to  Langston.  Instead  of  having 
to  set  up  its  own  enrollment 
facilities,  he  said,  “we  just  pay 
a  fee  for  service.” 

Larry  Orluskie,  a  spokes¬ 
man  for  the  Department  of 
Homeland  Security,  said  the 
DHS  this  week  will  start  roll¬ 
ing  out  PIV  cards  to  about 
5,500  employees  in  the  Wash¬ 
ington  area.  The  agency’s  goal 
is  to  make  the  cards  available 
to  all  of  its  employees  and  con¬ 
tractors  within  a  year,  he  said. 

The  DHS  is  using  ID  One 
Cosmo  smart  cards  made  by 
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demonstration  of  Cisco’s  prod¬ 
ucts  “really  skeptical  but  came 
out  a  changed  man.  This  is  the 
first  videoconferencing  system 
I’ve  seen  that  has  the  opportu¬ 
nity  to  change  the  way  people 
interact  with  one  another.” 

But  Kerravala  noted  that 
Cisco’s  systems  are  “relatively 
expensive”  and  require  the  use 
of  a  specialized  room. 

Cisco’s  strategy  is  somewhat 
similar  to  Hewlett-Packard 
Co.’s  Halo  program,  under 
which  HP  offers  videoconfer¬ 
encing  links  from  studios  that 
it  designed  in  partnership  with 
movie  maker  DreamWorks 
Animation  LLC. » 


Nanterre,  France-based  Ober- 
thur  Card  Systems  SA.  Like  all 
PIV  cards,  Oberthur’s  feature 
both  a  contact  interface,  such 
as  a  magnetic  stripe,  and  a 
contactless  radio  frequency 
interface  to  make  it  easier 
to  integrate  the  cards  with 
both  building  access  and  IT 
security  systems.  At  the  DHS, 
though,  the  cards  initially  will 
be  used  only  for  physical  ac¬ 
cess,  Orluskie  said. 

Likewise,  the  SSA  at  first 
will  use  PIV  cards  only  to 
control  access  to  buildings 
and  other  facilities  before 
eventually  linking  them  to  its 
computer  systems,  said  agency 
spokesman  Green. 

Activldentity  Inc.  in  Fre¬ 
mont,  Calif.,  is  supplying 
smart-card  technologies  to 
several  government  agen¬ 
cies.  Robert  Brandewie,  the 
company’s  senior  vice  presi¬ 
dent  of  public-sector  solutions, 
said  meeting  the  HSPD-12 
card-distribution  deadline 
even  in  a  small  way  “is  a  tre¬ 
mendous  accomplishment,” 
given  the  amount  of  work  that 
was  needed  and  the  relatively 
short  amount  of  time  that  was 
available  to  agencies. 

“There  has  been  a  tremen¬ 
dous  amount  of  behind-the- 
scenes  effort  to  get  the  infra¬ 
structure  ready  and  to  get  the 
technology  in  place  to  meet  the 
deadline,”  Brandewie  said. » 
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.INFRASTRUCTURE  LOG 

_DAY  28:  These  slow,  inefficient  boxes  don’t  have  enough 
power  to  run  my  high-end  business  apps.  They  don’t  have 
enough  power  to  do  anything  except  crash. 

.Need  sleep.  Will  try  to  dream  that  I  am  I.T.  King  of  a 
planet  that  only  produces  really  powerful  servers. 

.DAY  30:  I’ve  got  it:  the  IBM  System  x™  with  the  AMD 
Opteron™  Processor.  It  has  more  power  and  more  efficiency 
than  I  ever  imagined  in  a  standards-based  server.  IBM 
Xcelerated  Memory  Technology™  can  let  us  access  data  up 
to  15  percent  faster  than  other  servers  for  maximized 
performance.*  I  can  finally  sleep  in  my  own  bed  again. 

_I  have  taken  back  control.  I  am  Ned,  benevolent  I.T. 
King  of  this...uh,  data  center. 


IBM  COM/TAKEBACKDONTROL/X 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 

Password:  0bs013t 


FULLY  A  THIRD  of  our  users  write  down  their  passwords 
instead  of  remembering  them.  That’s  according  to  a  recent 
study  of  325  enterprise  users,  conducted  by  Nucleus  Re¬ 
search  and  KnowledgeStorm.  And  I’m  surprised.  Only  one- 
third?  It’s  a  small  miracle  that  the  number  isn’t  closer  to  90%. 
After  all,  what  do  we  ask  of  users  when  it  comes  to  passwords?  We 
ask  them  to  choose  complex,  hard-to-remember  passwords.  And  to 
choose  a  different  hard-to-remember  password  for  each  system. 

And  then  we  tell  them  not  to  write  all  those  passwords  down. 

That’s  crazy.  But  that’s  the  password  as  we  know  it  today. 


No  wonder  our  help  desks  spend  so  much  time 
resetting  passwords.  And  no  wonder  users  com¬ 
promise  security  by  using  Post-its,  cheat  sheets 
and  text  files  to  keep  track  of  all  their  passwords. 
These  days  there  are  just  too  many  of  them,  so 
something’s  got  to  give  —  whether  it’s  complex¬ 
ity,  variety  or  secrecy. 

Passwords  were  a  fine  idea  back  when  a  user 
needed  just  one  to  log  in  at  a  time-sharing  termi¬ 
nal.  But  now  it’s  time  to  move  on  to  other  kinds 
of  authentication,  whether  that  means  single  sign- 
on,  hardware  tokens  or  biometrics.  Let’s  face  it, 
the  password  is  at  the  end  of  its  useful  life. 

And  passwords  aren’t  alone.  Plenty  of  other 
IT  standards  were  big  steps  forward  in  their  day 
—  dramatic  technological  advances  that  reshaped 
the  face  of  IT  shops  and  user  desktops  alike.  But 
time  has  passed.  The  world  has  changed.  And 
they  just  don’t  make  sense  anymore. 

Cases  in  point: 

s  ASCII.  A  big  improvement  over  IBM’s  pro¬ 
prietary  EBCDIC  character  set  in  the  1960s.  But 
today  we  do  business  globally,  and  ASCII  can’t 
even  handle  euro  or  yen  signs.  Fortunately, 
there’s  Unicode,  a  multibyte  character  set  that’s 
built  on  top  of  ASCII,  handles  virtually  every 
alphabet  used  today  and  is  supported 
by  most  major  applications  and  oper¬ 
ating  systems.  It’s  time  for  corporate 
IT  to  make  that  our  standard,  too. 

*  The  CRT.  It  beat  the  heck  out  of 
the  clattering  teletypewriter  it  re¬ 
placed.  But  today,  cathode  ray  tube 
screens  are  hot,  heavy,  large,  power- 
hungry,  fragile,  full  of  toxic  materials 
and  prone  to  getting  blurry.  Their 
only  advantage:  They’re  cheap  to 
buy,  even  though  they’re  much  more 
expensive  to  use  than  other  display 
technologies.  It’s  time  to  apply  TCO 
to  the  CRT  and  declare  it  DOA. 

■  The  mouse.  A  huge  step  forward 


from  keyboard-only  menus.  But  the  mouse  was 
designed  decades  ago  for  moving  a  pointer  on  a 
TV  screen.  We  can  do  better  today.  The  current 
crop  of  tablet  PCs  may  be  lame,  but  they  embody 
the  right  idea:  directly  selecting  items  with  a 
fingertip  or  stylus.  It’s  time  to  cut  out  the  middle¬ 
man  . . .  er,  mouse. 

■  The  hard  disk.  Stand-alone  drives  in  PCs  fail. 
And  when  they  do,  data  goes  away  —  often  very 
suddenly.  That’s  completely  unnecessary.  Several 
small  drives  could  fit  in  the  same  space,  config¬ 
ured  as  a  RAID  array.  That  would  make  most 
disk  failures  survivable. 

■  Regular  backups.  Today’s  databases  are  too  big, 
and  they  can’t  stand  still  for  frequent  snapshots. 
Besides,  backups  fail  far  too  often.  We’re  better 
off  with  continuous  logging  of  transactions,  so 
instead  of  a  mystery-meat  stew  of  potentially 
suspect  data  from  a  backup,  we  can  rebuild  a 
crashed  system  by  replaying  what  actually  hap¬ 
pened.  That  would  make  the  Sarbanes-Oxley 
boys  happier,  too. 

■  Air-cooled  servers.  Air  was  a  big  improve¬ 
ment  over  water  cooling  for  mainframes  —  no 
more  plumbing  in  the  computer  room.  But  the 
heat  generated  in  data  centers  continues  to  soar. 

We’ve  passed  the  point  where  mov¬ 
ing  cooled  air  past  racks  and  racks 
of  servers  is  efficient.  It’s  time  to 
bring  back  water  or  other  kinds  of 
direct  cooling  —  and  time  for  ven¬ 
dors  to  start  building  support  for 
those  cooling  systems  into  blade 
servers. 

Can  we  dump  these  technologies 
that  have  reached  their  expiration 
dates?  Not  anytime  soon  —  we  de¬ 
pend  on  them  too  much.  But,  like 
passwords,  their  time  is  past. 

And  the  sooner  we  start  planning 
to  replace  them,  the  less  crazy  our 
work  will  be.  * 


FRANK  HAYES,  Computer- 
world's  senior  news  columnist, 
has  covered  IT  for  more  than 
20  years.  Contact  him  at  frank. 
hayes@computerworld.com. 


Tightening  Up,  Loosening  Up 

This  company's  Internet  use  policy  is  pretty  weak 
but  better  than  nothing.  Then  one  user  is  found  with 
more  than  1GB  of  pornography  on  the  network.  “But 
the  policy  only  said  you  couldn’t  send  or  receive  porn, 
not  that  you  couldn’t  have  it,”  reports  a  pilot  fish  on 
the  scene.  “The  user  was  disciplined  but  kept  his  job. 
In  the  wake  of  this  fiasco,  a  high-ranking  VP  decided 
to  spearhead  the  push  for  a  new  comprehensive  pol¬ 
icy  with  teeth.  Fast-forward  about  two  years:  Guess 
who  was  the  first  person  caught  and  fired?  The  VP 
himself  -  and  was  he  angry  about  it!" 


Not  So  Hot 

User  on  sick 
leave  wants  to 
read  his  e-mail 
but  can’t  re¬ 
member  the  password 
that  was  sent  to  him 
long  before.  Can  you 
help?  he  asks  his  IT  pi¬ 
lot  fish  friend.  “I  phoned 
the  help  desk  and  they 
said  they  could  only  re¬ 
veal  the  new  password 
to  the  user,”  says  fish. 
“But  the  help-desker 
came  up  with  a  solution: 
They  would  send  the 
password  to  a  Hotmail 
address  that  I  specified.’ 

Just  Shut  Up! 

Lab  tech  complains  his 
workstation  has  started 
making  an  unbearably 
loud  whine,  so  support 
pilot  fish  investigates. 
“We  discovered  a  piece 
of  duct  tape  covering 
the  SCSI  controller 
card’s  speaker,”  fish 
says.  “It  apparently 
had  been  on  there  for  a 
while  and  finally  loos¬ 
ened  up  enough  to  let 
the  sound  out.  Turns 
out  it  was  an  alarm  for 
the  RAID  degrading 
because  of  a  failing 
hard  drive.  The  lab  tech 
says  the  PC  has  always 
had  a  little  whine  for  as 
long  as  he’s  been  here 
-  about  one  and  a  half 


Not  Quite 
Right 

Support  pilot 
hsh  gets  a  call 
from  a  user  who 
says  the  power  supply 
for  her  laptop  is  spark¬ 
ing  and  flaming.  “My 
first  question  was,  ‘Did 
you  unplug  it?’  She 
replied  yes,”  says  hsh. 

“I  headed  over  to  her  of¬ 
fice.  She  had  unplugged 
it  -  from  the  computer. 
Not  from  the  wall,  where 
the  electricity  comes 
from.  I’m  shocked  she 
didn’t  burn  down  the 
’  building.  Ever  since.  I've 
been  giving  users  a  pop 
quiz  about  what  to  do  in 
this  situation.” 

Um,  No 

Pilot  hsh  leaves  a  mes¬ 
sage  for  a  user  to  call 
his  pager  number  but 
gets  no  response.  Next 
day,  hsh  tracks  down 
the  user  to  hnd  out 
why.  “Yes,  I  paged  you 
three  times,”  user  tells 
hsh.  “Why  didn’t  you 
call  back?”  Hmm,  says 
the  now  very  concerned 
hsh,  what  exactly  did 
you  do?  “I  dialed  your 
number.”  Good,  says 
hsh,  and  then?  “I  heard 
a  ‘tweedle.’  ”  OK,  then 
what?  “I  hung  up,  of 
course.”  You  what?!? 
“Certainly  -  didn’t  it 


years.”  read  my  number?” 

OSHARKY  WANTS  TO  READ  your  true  tale  of  IT  life. 

Fire  it  off  to  me  at  sharky@computerworld.com, 
and  a  snazzy  Shark  shirt  is  yours  if  I  use  it.  And  check  out 
Sharky's  blog,  browse  the  Sharkives  and  sign  up  for  Shark 
Tank  home  delivery  at  computerworld.com/sharky. 


SHARK 

TANK*. 


Congratulations  to 

Finalists! 

The  SNW  “Best  Practices  in  Storage”  Award 
Recipients  will  Be  Honored  Thursday,  November  2nd 
at  Storage  Networking  World  in  Orlando. 

Storage  Networking  World  (SNW),  in  conjunction  with  Computerworld  and  the  Storage 
Networking  Industry  Association  (SNIA),  proudly  presents  the  eighth  SNW  “Best  Practices 
in  Storage”  Awards  Program.  This  program  honors  IT  user  “best  practice"  case  studies 
selected  from  a  field  of  qualified  finalists. 

Finalists  in  each  of  the  following  categories  are: 

Innovation  and  Promise _ 

•  Digital  Film  Tree,  Hollywood,  California 

•  Level  3  Communications,  Broomfield,  Colorado 

•  Pixar  Animation  Studios,  Emeryville,  California 

Planning  Designing  and  Building  Strategic  Storage  Infrastructure 

•  Defense  Contract  Management  Agency,  Fairfax  County,  Virginia  •  Salisbury  University,  Salisbury,  Maryland 

•  Denver  Health,  Denver,  Colorado  •  The  AVID  Group,  Palm  Harbor,  Florida 

•  Industrial  Color,  New  York,  New  York 

Securing  the  Storage  Fortress 

•  Cbeyond  Inc.,  Atlanta,  Georgia  •  Screen  Actors  Guild  -  Producers  Pension  and  Health  Plans 

•  George  Washington  University,  Washington,  DC  (SAG-PPHP),  Burbank,  California 

•  R.C.  Willey  Home  Furnishings,  Salt  Lake  City,  Utah  •  Sinclair  Community  College,  Dayton,  Ohio 

Storage  Reliability  and  Data  Recovery 

•  APM  Terminals,  Charlotte,  North  Carolina  •  CSX,  Jacksonville,  Florida 

•  Chaffe  McCall,  New  Orleans,  Louisiana  •  Intuitive  Surgical,  Sunnyvale,  California 

•  Corrections  Corporation  of  America,  Nashville,  Tennessee 

Systems  Implementation 

•  AOL,  Reston,  Virginia  •  MedicAlert  Foundation,  Turlock,  California 

•  Bardel  Entertainment,  Vancouver,  British  Columbia  •  Pacific  Title  and  Art  Studio,  West  Hollywood,  California 

•  CSX,  Jacksonville,  Florida 


•  The  Virginia  Department  of  Motor  Vehicles,  Richmond,  Virginia 

•  Warner  Bros.  Entertainment  Inc.,  Burbank,  California 


SNIA 
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Judging  Criteria 

Judges  evaluated  and  ranked  the  finalists  in  each  category  according  to  their  substantiated  storage  network¬ 
ing  solution  attributes  and  achievements  against  a  set  of  criteria  such  as: 

•  Financial  return  and  measurable  payback  (returns  on  investment,  assets,  resources)  through 
created/protected  revenue  opportunities  or  cost  savings. 

•  Strategic  importance  to  the  business. 

•  Substantive  customer  impact  (service,  retention,  acquisition). 

•  Positive  impact  on  other  business/organization  units. 

•  Addresses  system  and  department  interoperability  issues  and  heterogeneous  platform  integration  challenges. 

•  Provides  a  strategic  advantage  to  the  business/organization  while  anticipating  and  accommodating  the 
deployment  of  future  storage  networking  solution  initiatives. 

•  Supports  the  efficient  and  reliable  data,  information  and  application  sharing/access  between 
personnel,  departments,  divisions,  etc. 

•  Addresses  challenges  of  data,  information  and  application  security,  recovery,  business  continuity,  etc. 


Thank  you  to  our  “Best  Practices  in  Storage”  Judges 


for  SNW  Fall  2006: 

•  Yuri  Aguiar,  Ogilvy  &  Mather  Worldwide 

•  Dennis  Anderson,  Ph.D.,  Pace  University 

•  George  Feitel,  Wavera 

•  Sharon  Fisher,  Computerworld 

•  Dale  Frantz,  Auto  Warehousing  Company 

•  Tony  Fuller,  Rent-A-Center 

•  Charles  Inches,  Corner  Banca 

•  Julia  King,  Computerworld 

•  Ellen  Lary,  Lary.com 


•  Richard  Lary,  Lary.com 

•  Lucas  Mearian,  Compuierworld 

•  Enzo  Micali,  1 800  Flowers.com 

•  Ron  Milton,  Computerworld 

•  Rick  Peltz,  Marcus  &  Millichap 

•  Larry  Thomas,  Landstar  Systems,  Inc. 

•  Richard  Villars,  IDC 

•  John  Webster,  llluminata 
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Oracle  Database 

Get  Better  Results 

With  Oracle  Database 


"35%  increase  in  performance  and 
reduced  costs  by  several  million 
with  Oracle  on  Linux" 


monster* 


today’s  the  day " 


Oracle  Database  10 g— 
World's  #1  Database 


oracle.com/database 
or  call  1.800.0RACLE.1 
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